CVE-2025-14648
A security vulnerability has been detected in DedeBIZ up to 6.5.9.
Published Dec 14, 2025 · updated Oct 14, 2026 · dedebiz dedebiz
A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_add.php. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2025 · NIST NVD
Detected
A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_add.php. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Oct 14, 2026 · NIST NVD
Updated
A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_add.php. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected
- cpe dedebiz/dedebizversion unspecified
Sources
- CVE.orgCVE-2025-14648
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-14648
30-day exploitation probability 7.3%
first.org - NIST NVDCVE-2025-14648
A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_add.php. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been d
nvd.nist.gov