CVE-2024-0558: A critical SQL injection vulnerability exists in DedeBIZ 6.3.0, specifically affecting the /admin/makehtml_freelist_action.php file. Remote attackers can exploit this flaw by manipulating the startid argument. This vulnerability allows for unauthorized database access and modification. Although the CVSS score is 7.2, the SOCRadar Vulnerability Risk Score (SVRS) is 56, indicating a moderate risk that should still be addressed to prevent potential exploitation. The exploit is publicly available, increasing the likelihood of attacks. Successful exploitation could lead to data breaches, system compromise, and significant damage to the DedeBIZ application and underlying database. Immediate mitigation steps are recommended to secure the application against this critical threat.