cbcvebase.

Weaver Network Co Ltd E-Office vulnerabilities

1 known vulnerability affecting weaver_network_co_ltd/e-office.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-50993P1CRITICALCVSS 9.8Exploitedfixed in 10.0_202212012026-04-30
CVE-2022-50993 [CRITICAL] CWE-434 CVE-2022-50993: Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file u Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types. Attackers can upload PHP webshells to the Document d
nvd
Weaver Network Co Ltd E-Office vulnerabilities | cvebase