133 matches found
CVE-2022-43340
A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...
CVE-2022-43340
A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...
CVE-2022-43340
CVE-2022-43340 affects dzzoffice version 2.02.1_SC_UTF8 and is described in connected sources as a CSRF vulnerability that lets an attacker arbitrarily create user accounts and grant Administrator rights to regular users. The root cause is a cross-site request forgery flaw in the account creation...
CVE-2022-43340
A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...
CVE-2022-43340
A Cross-Site Request Forgery CSRF in dzzoffice 2.02.1SCUTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users...
PT-2022-26858 · Dzzoffice · Dzzoffice
Name of the Vulnerable Software and Affected Versions: dzzoffice version 2.02.1 SC UTF8 Description: A Cross-Site Request Forgery CSRF issue allows attackers to create user accounts arbitrarily and grant Administrator rights to regular users. Recommendations: For dzzoffice version 2.02.1 SC UTF8,...
DzzOffice 跨站请求伪造漏洞
DzzOffice is a platform that provides online collaborative office suite functionality from the American company Big Desk DzzOffice. The platform can be used to provide online documents, forms, webstores, presentations, and other features. A security vulnerability exists in DzzOffice version...
CVE-2021-43673
dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...
CVE-2021-43673
dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...
CVE-2021-43673
dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...
CVE-2021-43673
CVE-2021-43673 affects dzzoffice 2.02.1_SC_UTF8. A Cross Site Scripting (XSS) vulnerability exists in explorerfile.php where the exit(json_encode($return)) output is sent to the user. CVSS details in the sources show a MEDIUM severity (CVSS v2: 4.3; CVSS v3.1: 6.1). No remediation or patch inform...
CVE-2021-43673
dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...
zyx0814 dzzoffice 跨站脚本漏洞
DzzOffice is a platform from IBM DzzOffice in the United States that provides online collaborative office suite functionality. The platform can be used to provide online documents, forms, webstores, presentations, and other features. zyx0814 A cross-site scripting vulnerability exists in dzzoffic...
DzzOffice Cross-Site Scripting Vulnerability (CNVD-2021-99270)
Dzzoffice is an open source office suite for enterprises and teams to build their own enterprise collaboration platform similar to "Google Enterprise Application Suite" and "Microsoft Office 365". Version 2.02.1 is vulnerable to a stored cross-site scripting vulnerability. An attacker can use the...
CVE-2021-40292
A Stored Cross Site Sripting XSS vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter...
CVE-2021-40292
A Stored Cross Site Sripting XSS vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter...
CVE-2021-40292
A Stored Cross Site Sripting XSS vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter...