e-Excellence U-Office Force Arbitrary File Upload Vulnerability Allowing Remote Code Execution

Vulnerability

A vulnerability allowing arbitrary file upload has been identified in e-Excellence U-Office Force versions prior to 28.0d. This vulnerability enables remote attackers with regular privileges to upload and execute web shell backdoors, facilitating arbitrary code execution on the server.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server.

Remediation

Users are advised to update to version 28.0 or later.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
3.3
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.