CVE-2025-63695

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php...

CVE-2025-63695

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php...

CVE-2025-63695

DzzOffice versions v2.3.7 and before are vulnerable to an Arbitrary File Upload vulnerability within the /dzz/system/ueditor/php/controller.php file. This flaw originates from the controller.php component, allowing for the Unrestricted Upload of File with Dangerous Type (CWE-434). An attacker cou...

ShirneCMS path traversal vulnerability

ShirneCMS is an open source backend management system of Shirne Software Shirnecn. ShirneCMS version 1.2.0 has a path traversal vulnerability. Attackers use this vulnerability to read arbitrary files via /static/ueditor/php/controller.php...