Weaver E‑office versions prior to 10.0_20221201 are vulnerable to an unauthenticated arbitrary file upload attack that allows attackers to place malicious files, such as PHP webshells, in the Document directory. By accessing these files via HTTP GET requests, an attacker can execute commands on the web server with the server user’s privileges. The weakness is a classic insecure file upload flaw (CWE‑434).

This flaw affects all installations of Weaver Network Co., Ltd. E‑office running versions earlier than 10.0_20221201. No sub‑product or module details are specified beyond the general product name and version threshold.

The CVSS score is 9.3, indicating a high‑severity vulnerability that grants remote code execution. The EPSS score is not available and the vulnerability is not yet listed in the CISA KEV catalog, but evidence of exploitation was observed by the Shadowserver Foundation on 2022‑10‑10. The attack vector is remote via HTTP, and no authentication or network restrictions are required, making the exploit highly feasible for adversaries with internet connectivity to the target system.