Medium severity6.3NVD Advisory· Published May 11, 2023· Updated Jun 17, 2026

CVE-2023-2647

Description

A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroot/inc/utility_all.php of the component File Upload Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228776. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Weaver/E-Office3 versions
cpe:2.3:a:weaver:e-office:9.5:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:weaver:e-office:9.5:*:*:*:*:*:*:*
- (no CPE)range: 9.5
- (no CPE)range: 9.5

Patches

Vulnerability mechanics

References

github.com/sunyixuan1228/cve/blob/main/weaver%20exec.mdnvdExploitThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000