CVEDB API

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 8.3%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2025-63695

Dzzoffice » Dzzoffice » Version: 1.3.1

cpe:2.3:a:dzzoffice:dzzoffice:1.3.1
Dzzoffice » Dzzoffice » Version: 2.0

cpe:2.3:a:dzzoffice:dzzoffice:2.0
Dzzoffice » Dzzoffice » Version: 2.01

cpe:2.3:a:dzzoffice:dzzoffice:2.01
Dzzoffice » Dzzoffice » Version: 2.02

cpe:2.3:a:dzzoffice:dzzoffice:2.02
Dzzoffice » Dzzoffice » Version: 2.02.1

cpe:2.3:a:dzzoffice:dzzoffice:2.02.1
Dzzoffice » Dzzoffice » Version: 2.02.1_sc_utf8

cpe:2.3:a:dzzoffice:dzzoffice:2.02.1_sc_utf8
Dzzoffice » Dzzoffice » Version: 2.3.0

cpe:2.3:a:dzzoffice:dzzoffice:2.3.0
Dzzoffice » Dzzoffice » Version: 2.3.2

cpe:2.3:a:dzzoffice:dzzoffice:2.3.2
Dzzoffice » Dzzoffice » Version: 2.3.3

cpe:2.3:a:dzzoffice:dzzoffice:2.3.3
Dzzoffice » Dzzoffice » Version: 2.3.4

cpe:2.3:a:dzzoffice:dzzoffice:2.3.4
Dzzoffice » Dzzoffice » Version: 2.3.5

cpe:2.3:a:dzzoffice:dzzoffice:2.3.5
Dzzoffice » Dzzoffice » Version: 2.3.7

cpe:2.3:a:dzzoffice:dzzoffice:2.3.7