github.comexploit
https://github.com/sunyixuan1228/cve/blob/main/weaver.md CVE-2023-2648
MEDIUMNuclei
Weaver E-Office uploadify.php unrestricted upload
Record summary
CVE-2023-2648 has a selected CVSS score of 6.3 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.
Description
A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Description source: CVE List
Exploitation context
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
E-OfficeBrowse Weaver / E-Office | CVE List, VulnCheck | 9.5 | affected |
Proofs of concept
1Repository PoCs
GitHubwerwolfz/cve-2023-2523-and-cve-2023-2648Repository PoCby werwolfzStars: 0Not analyzed3 files
Nuclei templates
1ProjectDiscoveryCRITICALWeaver E-Office 9.5 - Remote Code ExecutionCVSS 9.8
A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Impact
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.
Remediation
Apply the latest security patch or upgrade to a patched version of Weaver E-Office.
WeaknessesCWE-434
Authorsritikchaddha
Template tagscve2023cveweavereofficeecologyfileuploadrceintrusivevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:weaver:e-office:9.5:*:*:*:*:*:*:*
FOFA: app="泛微-EOffice"
FOFA: app="泛微-eoffice"
https://github.com/sunyixuan1228/cve/blob/main/weaver.md https://nvd.nist.gov/vuln/detail/CVE-2023-2648 https://vuldb.com/?ctiid.228777 https://vuldb.com/?id.228777 https://github.com/bingtangbanli/cve-2023-2523-and-cve-2023-2648
Source: ProjectDiscovery
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-2648 vuldb.comsignaturepermissions required
https://vuldb.com/?ctiid.228777 vuldb.comvdb entryTechnical description
https://vuldb.com/?id.228777