CVE-2023-2765

A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-229270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-36

• https://github.com/eckert-lcc/cve/blob/main/Weaver%20oa.mdExploit
• https://vuldb.com/?ctiid.229270Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.229270Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/eckert-lcc/cve/blob/main/Weaver%20oa.mdExploit
• https://vuldb.com/?ctiid.229270Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.229270Permissions Required, Third Party Advisory, VDB Entry

Published

May 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27641The REPORT (after z but before a) parameter in wa.exe in L-S…6.1
• CVE-2023-27643An issue found in POWERAMP 925-bundle-play and Poweramp 954-…7.5
• CVE-2023-27645An issue found in POWERAMP audioplayer build 925 bundle play…9.8
• CVE-2023-27647An issue found in DUALSPACE Lock Master v.2.2.4 allows a loc…7.1
• CVE-2023-27648Directory Traversal vulnerability found in T-ME Studios Chan…9.8
• CVE-2023-27649SQL injection vulnerability found in Trusted Tools Free Musi…7.5
• CVE-2023-27650An issue found in APUS Group Launcher v.3.10.73 and v.3.10.8…9.8
• CVE-2023-27651An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 …7.8
• CVE-2023-27652An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 …5.5
• CVE-2023-27653An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an …7.5
• CVE-2023-27654An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an …9.8
• CVE-2023-27655Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…