DedeBIZ SQL Injection Vulnerability in admin/templets_one_edit.php

A critical SQL injection vulnerability exists in DedeBIZ CMS versions through 6.3.2. The issue is located in the file admin/templets_one_edit.php, where the ids parameter is not properly validated before being used in database queries. This flaw allows remote attackers to inject malicious SQL commands, potentially leading to unauthorized database access or manipulation.

Impact

Exploitation of this vulnerability allows for arbitrary SQL injection, which could be used to manipulate database queries and access or modify database information.

Reproduction

To reproduce this vulnerability, log into the DedeBIZ CMS and navigate to the admin/templets_one.php page. Click on 'Update Select Single page' to trigger the admin/templets_one_edit.php page. Once there, send a request to the admin/templets_one_edit.php file with the ids parameter containing a crafted payload that exploits the SQL injection vulnerability, such as one that uses the extractvalue function to retrieve database information.