DzzOffice 2.02.1
Approved changes feed: RSS · Atom
cpe:2.3:a:dzzoffice:dzzoffice:2.02.1:*:*:*:*:*:*:*part: a version: 2.02.1 update: *
| Vendor | Dzzoffice (56edb208-c437-5a8b-b9c5-0485c06f6083) |
|---|---|
| Product | Dzzoffice (6466fe61-0237-55a5-9563-719245307362) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/zyx0814/dzzoffice |
purl2cpe | 2026-06-01 10:11:57.798823 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41376 |
vulnerable | 2026-06-08 06:43:54.489281 |
Details available
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.
Published: 2024-08-05T00:00:00.000Z
Updated: 2024-08-05T17:40:28.470Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43340 |
vulnerable | 2026-06-08 05:49:31.509974 |
Details available
A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users.
Published: 2022-10-27T00:00:00.000Z
Updated: 2026-07-09T00:22:16.278Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43673 |
vulnerable | 2026-06-08 05:36:43.678422 |
Details available
dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of the exit function is printed for the user via exit(json_encode($return)).
Published: 2021-12-03T11:36:13.000Z
Updated: 2024-08-04T04:03:08.620Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40292 |
vulnerable | 2026-06-08 05:35:17.387508 |
Details available
A Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter.
Published: 2021-10-12T17:31:05.000Z
Updated: 2024-08-04T02:27:31.934Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40191 |
vulnerable | 2026-06-08 05:35:17.335658 |
Details available
Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php.
Published: 2021-10-11T13:34:42.000Z
Updated: 2024-08-04T02:27:31.869Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30205 |
vulnerable | 2026-06-08 05:31:47.239380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30203 |
vulnerable | 2026-06-08 05:31:47.238868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.