Skip to content
OpenAdvisories

Product · Weaver

OA

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-2766 Scanner template EPSS 54%

    Weaver OA jx2_config.ini file access

    A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini. The manipulation leads to files or directories accessible. The atta…

  • Medium 4.3

    Weaver OA downfile.php absolute path traversal

    A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack …