133 matches found
CVE-2021-40292
A Stored Cross Site Sripting XSS vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter...
DzzOffice 跨站脚本漏洞
Dzzoffice is an open source office suite for enterprises and teams to build their own enterprise collaboration platform similar to "Google Enterprise Application Suite" and "Microsoft Office 365". Version 2.02.1 is vulnerable to a stored cross-site scripting vulnerability. An attacker can use the...
CVE-2021-40191
Dzzoffice Version 2.02.1 is affected by cross-site scripting XSS due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php...
CVE-2021-40191
Dzzoffice Version 2.02.1 is affected by cross-site scripting XSS due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php...
CVE-2021-40191
Dzzoffice Version 2.02.1 is affected by cross-site scripting XSS due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php...
Cross site scripting
Dzzoffice Version 2.02.1 is affected by cross-site scripting XSS due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php...
CVE-2021-40191
Dzzoffice Version 2.02.1 is affected by cross-site scripting XSS due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php...
CVE-2021-40191
CVE-2021-40191 affects Dzzoffice 2.02.1 with a cross-site scripting (XSS) flaw caused by insufficient sanitization of input data across all upload functions in webroot/dzz/attach/Uploader.class.php, and a misconstructed output content-type in webroot/dzz/attach/controller.php. The issue is docume...
DzzOffice 跨站脚本漏洞
DzzOffice is a platform from IBM DzzOffice in the United States that provides online collaborative office suite functionality. The platform can be used to provide features such as online documents, forms, webstores, presentations, and more. A cross-site scripting vulnerability exists in IBM...
CVE-2020-19703
A cross-site scripting XSS vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2020-19703
A cross-site scripting XSS vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Cross site scripting
A cross-site scripting XSS vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2020-19703
CVE-2020-19703 is an XSS in the referer parameter of Dzzoffice 2.02. The provided documents consistently describe a cross-site scripting vulnerability that allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. No explicit exploit details, affected files, or patch vers...
DzzOffice 跨站脚本漏洞
DzzOffice is a platform from IBM DzzOffice in the United States that provides online collaborative office suite functionality. The platform can be used to provide online documents, forms, web disk, presentations and other functions. A security vulnerability exists in the referer parameter of...
Command Execution Vulnerability in DzzOffice
Dzzoffice is a set of open source office suite for enterprises, teams to build their own similar to the "Google Apps Suite", "Microsoft Office365" enterprise collaboration platform. DzzOffice has a command execution vulnerability that can be exploited by attackers to gain control of the server...
DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS)
Exploit Title: DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting XSS Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty, g3ck0dr1v3r Date: 04/23/2021 Vendor: http://www.dzzoffice.com/ Link: https://github.com/zyx0814/dzzoffice CVE: CVE-2021-3318 + Exploit Source: !/usr/bin/python3 Author...
DzzOffice 2.02.1 Cross Site Scripting
Exploit Title: XSS attack app/setting in DzzOffice-2.02.1 Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty, g3ck0dr1v3r Date: 04.23.2021 Vendor: http://www.dzzoffice.com/ Link: https://github.com/zyx0814/dzzoffice CVE: CVE-2021-3318 + Exploit Source: !/usr/bin/python3 Author:...
DzzOffice Cross-Site Scripting Vulnerability
Dzzoffice is a set of open source office suite for enterprises, teams to build their own similar to the "Google Apps Suite", "Microsoft Office365" enterprise collaboration platform. A cross-site scripting vulnerability exists in attach/ajax.php in DzzOffice 2.02.1 and earlier versions. The...