Dzzoffice: >> Dzzoffice >> 2.01 Security Vulnerabilities
SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain sensitive information via the doobj and doevent parameters in the Network Disk backend module.
CVSS Score
6.5
EPSS Score
0.002
Published
2024-01-06
attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.
CVSS Score
6.1
EPSS Score
0.003
Published
2021-01-27