Skip to content
Dzzoffice vulnerabilities
Newest
-
dzzoffice
DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php...
CVE-2025-63695
9.8 Critical
-
dzzoffice
DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.
CVE-2025-63694
9.8 Critical
-
dzzoffice
The comment editing template (dzz/comment/template/edit_form.htm) in DzzOffice 2.3.x lacks...
CVE-2025-63693
5.4 Medium
-
dzzoffice
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.
CVE-2024-41376
8.8 High
-
dzzoffice
There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php...
CVE-2024-29273
6.1 Medium
-
dzzoffice
SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain...
CVE-2023-39853
6.5 Medium
-
dzzoffice
Incorrect access control in the component /index.php?mod=system&op=orgtree of dzzoffice 2.02...
CVE-2021-30205
5.3 Medium
-
dzzoffice
A reflected cross-site scripting (XSS) vulnerability in the zero parameter of dzzoffice 2.02...
CVE-2021-30203
6.1 Medium
-
dzzoffice
A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily...
CVE-2022-43340
8.8 High
-
dzzoffice
dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in...
CVE-2021-43673
6.1 Medium
-
dzzoffice
A Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew...
CVE-2021-40292
5.4 Medium
-
dzzoffice
Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization...
CVE-2021-40191
5.4 Medium
-
dzzoffice
A cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows...
CVE-2020-19703
6.1 Medium
-
dzzoffice
attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.
CVE-2021-3318
Public exploit
6.1 Medium