139 matches found
CVE-2023-32757
CVE-2023-32757 affects e-Excellence U-Office Force, where the file uploading function does not restrict dangerous file types. The root cause is unrestricted file type handling, enabling an unauthenticated, remote attacker to upload arbitrary files and potentially perform arbitrary commands or dis...
CVE-2023-32757 e-Excellence U-Office Force - Arbitrary File Upload
e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...
CVE-2023-32756
CVE-2023-32756 affects e-Excellence U-Office Force and is a path traversal vulnerability in its file upload/download functionality. An unauthenticated remote attacker can read arbitrary system files, with no ability to compromise or disrupt system operation as described in the sources. Several da...
CVE-2023-32756 e-Excellence U-Office Force - Path Traversal
e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service...
CVE-2023-32756 e-Excellence U-Office Force - Path Traversal
e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service...
CVE-2023-32755 e-Excellence U-Office Force - Error Message Leakage
e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...
CVE-2023-32755
CVE-2023-32755 affects e-Excellence U-Office Force. The web service may reveal partial sensitive system information via crafted commands in error messages; no concrete patch/version is provided in the sources. Monitor for updates and advisories from multiple vendors.
CVE-2023-32755 e-Excellence U-Office Force - Error Message Leakage
e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...
e-Excellence U-Office Force 路径遍历漏洞
e-Excellence U-Office Force is an e-Office platform from China First Class Technology e-Excellence. A path traversal vulnerability exists in e-Excellence U-Office Forc, which can be exploited by an attacker to read arbitrary system files...
PT-2023-24003 · Unknown · E-Excellence U-Office Force
Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: An unauthenticated remote attacker can obtain partial sensitive system information from an error message by sending a crafted command to the website service of...
PT-2023-24004 · Unknown · E-Excellence U-Office Force
Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The issue is related to a path traversal vulnerability within the file uploading and downloading functions. An unauthenticated remote attacker can exploit this to read...
How to Achieve AWS Operational Excellence in Your Cloud Workload
Explore the Operational Excellence pillar of the AWS Well-Architected Framework and examine best practices and design principles for cloud-based security operations, including CI/CD and risk management...
CVE-2023-33515
SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting XSS via query screens...
CVE-2023-33515
SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting XSS via query screens...
CVE-2023-33515
SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting XSS via query screens...
Cross site scripting
SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting XSS via query screens...
PT-2023-24372 · Softexpert · Softexpert Excellence Suite
Name of the Vulnerable Software and Affected Versions: SoftExpert Excellence Suite version 2.1.9 Description: The issue is related to Cross Site Scripting XSS and can be exploited via query screens. This means an attacker could potentially inject malicious scripts into the website, which would th...
CVE-2023-33515
CVE-2023-33515 affects SoftExpert Excellence Suite version 2.1.9, with a reported Cross-Site Scripting (XSS) vulnerability exploitable via query screens. The issue is described across multiple sources as an XSS in SoftExpert Suite 2.1.9, and the commonly cited attack path involves input that is r...