Security Advisory
CVE-2025-12860
4.7
MEDIUM
Vulnerability Description
A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php. The manipulation of the argument orderby results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published Date
November 7, 2025
Official Source
NIST NVD Advisory