CVE-2022-39026 e-Excellence Inc. U-Office Force - Stored XSS

U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS Stored Cross-Site Scripting attack...

CVE-2022-39025

CVE-2022-39025 affects U-Office Force PrintMessage function, where insufficient filtering of special characters enables a reflected XSS if an unauthenticated, remote attacker injects JavaScript. The primary sources consistently describe a cross-site scripting vulnerability without specifying affe...

CVE-2022-39025 e-Excellence Inc. U-Office Force - Reflected XSS

U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...

CVE-2022-39025 e-Excellence Inc. U-Office Force - Reflected XSS

U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...

CVE-2022-39024 e-Excellence Inc. U-Office Force - Reflected XSS

U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...

CVE-2022-39024

The CVE-2022-39024 entry concerns U-Office Force Bulletin, where the Bulletin function allows insufficient filtering for special characters, enabling an unauthenticated, remote attacker to inject JavaScript and perform a reflected XSS attack. The vulnerability is described across multiple sources...

CVE-2022-39024 e-Excellence Inc. U-Office Force - Reflected XSS

U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS Reflected Cross-Site Scripting attack...

CVE-2022-39023

CVE-2022-39023 concerns U-Office’s Force Download function, where a path traversal vulnerability allows a remote user with general privileges to download arbitrary system files. The NVD description states the vulnerability arises in the download mechanism and can be exploited without user interac...

CVE-2022-39023 e-Excellence Inc. U-Office Force - Path Traversal

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file...

CVE-2022-39023 e-Excellence Inc. U-Office Force - Path Traversal

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file...

CVE-2022-39022 e-Excellence Inc. U-Office Force - Path Traversal

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file...

CVE-2022-39022 e-Excellence Inc. U-Office Force - Path Traversal

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file...

CVE-2022-39022

CVE-2022-39022 concerns the U-Office Force Download function, which has a path traversal vulnerability. A remote attacker with general user privileges can exploit this to download arbitrary system files. Public references (NVD/TWCERT) cite a CVSS v3.1 base score of 6.5 (MEDIUM) with NETWORK attac...

CVE-2022-39021 e-Excellence Inc. U-Office Force - Open Redirect

U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitrary website...

CVE-2022-39021

CVE-2022-39021 affects U-Office Force login function, with an Open Redirect vulnerability. An unauthenticated remote attacker can trigger redirects to arbitrary websites. The CVSS 3.1 base score is 6.1 (MEDIUM) with Network attack vector, low impact on confidentiality and integrity, and user inte...

CVE-2022-39021 e-Excellence Inc. U-Office Force - Open Redirect

U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitrary website...

PT-2022-24680 · U-Office · U-Office

Name of the Vulnerable Software and Affected Versions: U-Office affected versions not specified Description: The issue is related to insufficient filtering for special characters in the Force Bulletin function, allowing an unauthenticated remote attacker to inject JavaScript and perform a Reflect...

PT-2022-24681 · U-Office · U-Office

Name of the Vulnerable Software and Affected Versions: U-Office affected versions not specified Description: The issue is related to insufficient filtering for special characters in the Force PrintMessage function. This allows an unauthenticated remote attacker to inject JavaScript, potentially...

e-Excellence U-Office Force 跨站脚本漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. U-Office Force suffers from a cross-site scripting vulnerability that stems from insufficient filtering of special characters in its Forum feature, which allows an unauthenticated, remote attacke...

e-Excellence U-Office Force 跨站脚本漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. U-Office Force suffers from a cross-site scripting vulnerability that stems from insufficient filtering of special characters in HTTP header fields on its UserDefault page, which could allow an...