Lucene search
PRIOn knowledge basePRION:CVE-2023-2648HistoryMay 11, 2023 - 8:15 a.m.
Design/Logic Flaw
2023-05-1108:15:00
PRIOn knowledge base
www.prio-n.com
1
weaver e-office
critical
unrestricted upload
remote attack
disclosure
vulnerability
nvd
file manipulation
A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Related
cve
cve
CVE-2023-2648
2023-05-11 08:15:08
cvelist
cvelist
CVE-2023-2648 Weaver E-Office uploadify.php unrestricted upload
2023-05-11 08:00:04
nvd
nvd
CVE-2023-2648
2023-05-11 08:15:08
nuclei
nuclei
Weaver E-Office 9.5 - Remote Code Execution
2023-09-05 12:32:23