https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-3227.htmlhttps://patchthecve.com/cve/CVE-2024-3227.htmlWed, 17 Jun 2026 07:43:34 +0000MEDIUM 4.7: A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /general/system/interface/theme_set/save_image.php of the component Backend. The manipulation of the argument image_type leads to path traversal: '../filedihttps://patchthecve.com/cve/CVE-2023-34798.htmlhttps://patchthecve.com/cve/CVE-2023-34798.htmlWed, 17 Jun 2026 06:04:00 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.https://patchthecve.com/cve/CVE-2023-2766.htmlhttps://patchthecve.com/cve/CVE-2023-2766.htmlWed, 17 Jun 2026 05:53:23 +0000MEDIUM 5.3: A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. The exploithttps://patchthecve.com/cve/CVE-2023-2765.htmlhttps://patchthecve.com/cve/CVE-2023-2765.htmlWed, 17 Jun 2026 05:53:23 +0000MEDIUM 4.3: A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack can be initiated remotely. The exploit hahttps://patchthecve.com/cve/CVE-2023-2648.htmlhttps://patchthecve.com/cve/CVE-2023-2648.htmlWed, 17 Jun 2026 05:53:05 +0000MEDIUM 6.3: A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has https://patchthecve.com/cve/CVE-2023-2647.htmlhttps://patchthecve.com/cve/CVE-2023-2647.htmlWed, 17 Jun 2026 05:53:05 +0000MEDIUM 6.3: A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroot/inc/utility_all.php of the component File Upload Handler. The manipulation leads to command injection. The attack may be launched remotely. The explohttps://patchthecve.com/cve/CVE-2023-2523.htmlhttps://patchthecve.com/cve/CVE-2023-2523.htmlWed, 17 Jun 2026 05:52:46 +0000HIGH 7.3: A vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax.php?action=mobile_upload_save. The manipulation of the argument upload_quwan leads to unrestricted upload. The attack may be launched remote