CVE-2023-2648

🗓️ 11 May 2023 08:00:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 85 Views🌐 WEB

Vulnerability in Weaver E-Office 9.5, allowing unrestricted file upload via /inc/jquery/uploadify/uploadify.ph

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for Command Injection in Tp-Link Archer_Ax21_Firmware	8 May 202405:41	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	27 Jul 202307:14	–	githubexploit
Circl	CVE-2023-2648	11 May 202312:15	–	circl
CNNVD	Weaver E-Office 代码问题漏洞	11 May 202300:00	–	cnnvd
Cvelist	CVE-2023-2648 Weaver E-Office uploadify.php unrestricted upload	11 May 202308:00	–	cvelist
Nuclei	Weaver E-Office 9.5 - Remote Code Execution	1 Jun 202605:38	–	nuclei
NVD	CVE-2023-2648	11 May 202308:15	–	nvd
OSV	CVE-2023-2648	11 May 202308:15	–	osv
Prion	Design/Logic Flaw	11 May 202308:15	–	prion
Positive Technologies	PT-2023-20671 · Unknown +1 · Weaver E-Office +1	11 May 202300:00	–	ptsecurity

NVD

Vulners

Node

weaver e-officeMatch9.5

[
  {
    "vendor": "Weaver",
    "product": "E-Office",
    "versions": [
      {
        "version": "9.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/sunyixuan1228/cve/blob/main/weaver.md

Parameter	Position	Path	Description	CWE
Filedata	upload data	/inc/jquery/uploadify/uploadify.php	Unrestricted file upload via Filedata in uploadify.php (CWE-434)	CWE-434

21 Nov 2024 07:59Current

8High risk

Vulners AI Score8

CVSS 3.16.3 - 9.8

CVSS 26.5

CVSS 36.3

EPSS0.92754

SSVC