Vendor
e-Excellence
15 known vulnerabilities.
Products
8 results · Clear filters · Feed
-
Medium 5.3
e-Excellence U-Office Force - Error Message Leakage
e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command.
-
Medium 5.4
e-Excellence Inc. U-Office Force - Stored XSS
U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
-
Medium 5.4
e-Excellence Inc. U-Office Force - Stored XSS
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
-
Medium 6.1
e-Excellence Inc. U-Office Force - Reflected XSS
U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
-
Medium 6.1
e-Excellence Inc. U-Office Force - Reflected XSS
U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
-
Medium 6.5
e-Excellence Inc. U-Office Force - Path Traversal
U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.
-
Medium 6.5
e-Excellence Inc. U-Office Force - Path Traversal
U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.
-
Medium 6.1
e-Excellence Inc. U-Office Force - Open Redirect
U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitrary website.