cve-2023-2523-and-cve-2023-2648

cve-2023-2523 Note: The script uploads a phpinfo file Usage: Results are automatically saved to result.txt Image Manual POC: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: null...

CVE-2023-2523

CVE-2023-2523 (Weaver E-Office 9.5) A remote unrestricted file upload vulnerability exists in Weaver E-Office 9.5 via the endpoint App/Ajax/ajax.php?action=mobile_upload_save, where the upload_quwan parameter enables uploading arbitrary files. The issue is exploitable remotely and has been public...

CVE-2023-2523: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax.php?action=mobileuploadsave. The manipulation of the argument uploadquwan leads to unrestricted upload. The attack may be launched...