Skip to content
OpenAdvisories

Product · Weaver

E-Office

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-2648 Scanner template EPSS 28%

    Weaver E-Office uploadify.php unrestricted upload

    A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initi…

  • Medium 6.3

    Weaver E-Office File Upload utility_all.php command injection

    A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroot/inc/utility_all.php of the component File Upload Handler. The manipulation leads to command injection. The a…