Skip to content
OpenAdvisories

Vendor

e-Excellence

15 known vulnerabilities.

4 results · Clear filters · Feed

  • High 8.8

    e-Excellence|U-Office Force - SQL Injection

    U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

  • High 8.8

    e-Excellence|U-Office Force - SQL Injection

    U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.

  • High 8.8

    e-Excellence U-Office Force - Arbitrary File Upload

    The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

  • High 7.5

    e-Excellence U-Office Force - Path Traversal

    e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service.