VendorsWeavere-officeall versions
Vulnerabilities

Weaver (Fanwei Network Technology Co., Ltd.) e-office OA

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2023-2648
Weaver E-Office uploadify.php unrestricted upload
Published 2023-05-11 · Modified
9.8EPSS 0.285
CVE-2023-34798
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
Published 2023-07-25 · Modified
9.8EPSS 0.008
CVE-2023-2647
Weaver E-Office File Upload utility_all.php command injection
Published 2023-05-11 · Modified
8.8EPSS 0.070
CVE-2023-2766
Weaver OA jx2_config.ini file access
Published 2023-05-17 · Modified
7.5EPSS 0.542
CVE-2023-2765
Weaver OA downfile.php absolute path traversal
Published 2023-05-17 · Modified
7.5EPSS 0.022
CVE-2024-3227
Panwei eoffice OA Backend save_image.php path traversal
Published 2024-04-03 · Analyzed
7.2EPSS 0.010