CVE-2025-14648
BaseFortify
Publication date: 2025-12-14
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dedebiz | dedebiz | to 6.5.9 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-77 | The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in DedeBIZ up to version 6.5.9, specifically in an unknown functionality of the file /src/admin/catalog_add.php. It allows an attacker to perform command injection remotely, meaning they can execute arbitrary commands on the affected system by manipulating this functionality.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized command execution on the affected system, potentially allowing an attacker to compromise the system's integrity, confidentiality, and availability. This could result in data breaches, system control loss, or service disruption.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking for the presence of the vulnerable file `/src/admin/catalog_add.php` on your DedeBIZ installation, specifically versions 6.5.0 through 6.5.9. Attackers may use Google dorking with queries like `inurl:src/admin/catalog_add.php` to identify vulnerable targets. Since exploitation requires authentication, monitoring for unusual authenticated requests to this endpoint may help detect attempts. There is a publicly available proof-of-concept exploit on GitHub which can be used in a controlled environment to test for vulnerability. Specific commands are not provided, but searching web server logs for requests to `/src/admin/catalog_add.php` and monitoring for suspicious parameters or command injection patterns is recommended. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the `/src/admin/catalog_add.php` file to trusted administrators only, implementing strict authentication and authorization controls, and monitoring for suspicious activity targeting this endpoint. Since no known countermeasures or patches are published, it is suggested to replace the affected component or upgrade to a non-vulnerable version if available. Additionally, consider disabling or limiting backend modules that process user input in this manner. Applying network-level protections such as web application firewalls (WAF) to detect and block command injection attempts can also help reduce risk. [1]