A vulnerability classified as critical was found in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archives_add.php. Such manipulation of the argument flags[] leads to sql injection.
This vulnerability is documented as CVE-2025-12927. The attack can be executed remotely. Additionally, an exploit exists.
