CVE-2023-2648

A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-434

• https://github.com/sunyixuan1228/cve/blob/main/weaver.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228777Third Party Advisory
• https://vuldb.com/?id.228777Third Party Advisory
• https://github.com/sunyixuan1228/cve/blob/main/weaver.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228777Third Party Advisory
• https://vuldb.com/?id.228777Third Party Advisory

Published

May 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26474XWiki Platform is a generic wiki platform. Starting in versi…8.8
• CVE-2023-26475XWiki Platform is a generic wiki platform. Starting in versi…8.8
• CVE-2023-26476XWiki Platform is a generic wiki platform. Starting in versi…7.5
• CVE-2023-26477XWiki Platform is a generic wiki platform. Starting in versi…9.8
• CVE-2023-26478XWiki Platform is a generic wiki platform. Starting in versi…8.1
• CVE-2023-26479XWiki Platform is a generic wiki platform. Starting in versi…6.5
• CVE-2023-26480XWiki Platform is a generic wiki platform. Starting in versi…5.4
• CVE-2023-26481authentik is an open-source Identity Provider. Due to an ins…6.5
• CVE-2023-26482Nextcloud server is an open source home cloud implementation…8.8
• CVE-2023-26483gosaml2 is a Pure Go implementation of SAML 2.0. SAML Servic…5.3
• CVE-2023-26484KubeVirt is a virtual machine management add-on for Kubernet…8.2
• CVE-2023-26485cmark-gfm is GitHub's fork of cmark, a CommonMark parsing an…7.5