DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.

Published Nov 18, 2025 · Updated Nov 19, 2025 · Assigned by mitre