Skip to content
OpenAdvisories

Vendor

e-Excellence

15 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8

    e-Excellence|U-Office Force - Insecure Deserialization

    U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.

  • Critical 9.8

    e-Excellence U-Office Force - Improper Authentication

    The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator.

  • Critical 9.8

    e-Excellence U-Office Force - Arbitrary File Upload

    e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or d…