Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-39853 EUVD-2023-43553GHSA-5x7g-8gcq-4xxf

SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain sensitive information via the doobj and doevent pa…

Published Jan 6, 2024 · Updated Jun 16, 2025 · Assigned by mitre

Description

SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain sensitive information via the doobj and doevent parameters in the Network Disk backend module.

References