CVE-2021-3318

Mô tả

Tham khảo

• packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.html · Exploit
• zyx0814/dzzoffice · Issue Tracking

Lỗ hổng khác của dzzoffice

• CVE-2025-63693TRUNG BÌNH 5.4The comment editing template (dzz/comment/template/edit_form.htm) in DzzOffice 2.3.x lacks adequate security escaping for user-controllable …
• CVE-2025-63695NGHIÊM TRỌNG 9.8DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.
• CVE-2025-63694NGHIÊM TRỌNG 9.8DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.
• CVE-2024-41376CAO 8.8dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.
• CVE-2024-29273TRUNG BÌNH 6.1There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document.