CVE-2024-48072

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...

CVE-2024-48072

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...

CVE-2024-48072: Improper Neutralization of Special Elements used in an SQL Command

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...

CVE-2024-48072

The collaborative management platform Weaver Ecology v9. * is vulnerable to a SQL injection flaw. The vulnerability exists in the /mobilemode/Action.jsp component, specifically involving the com.weaver.formmodel.mobile.mec.servlet.MECAction invoker. An attacker can exploit the getFieldTriggerValu...