← Database

CVE-2025-14648

MEDIUM CVSS: 4.7 Published: 2025-12-14 Modified: 2026-06-17

Description

A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_add.php. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected Platforms

Dedebiz Dedebiz

Weakness Type

CWE-74, CWE-77, CWE-77

References