Product
weaver e cology
11 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2026-22679
CVE-2025-34038
CVE-2024-48072
CVE-2024-48070
CVE-2024-48069
CVE-2024-48071
CVE-2024-7704
CVE-2023-51892
CVE-2023-3793
CVE-2023-2806
CVE-2019-10272
< 20260312
Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /p
<= 8.0
A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsaniti
all versions
Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.w
all versions
An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code
all versions
A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload maliciou
all versions
E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causi
all versions
A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file
all versions
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the Framewor
< 10.58.0
A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the fil
all versions
A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function R
all versions
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwa