CVE-2024-48072

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction=getFieldTriggerValue==HrmResourceManager=1%3d1=1=%3d=1...

CVE-2024-48072

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...

CVE-2024-48072

The collaborative management platform Weaver Ecology v9. * is vulnerable to a SQL injection flaw. The vulnerability exists in the /mobilemode/Action.jsp component, specifically involving the com.weaver.formmodel.mobile.mec.servlet.MECAction invoker. An attacker can exploit the getFieldTriggerValu...

PT-2024-32982

Name of the Vulnerable Software and Affected Versions Weaver Ecology versions 9. Description A SQL injection issue was discovered in the component /mobilemode/Action.jsp with specific parameters such as invoker, action, searchField, fromTable, whereClause, triggerCondition, expression, and...

CVE-2024-48072

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...

PT-2020-19305

Name of the Vulnerable Software and Affected Versions PCS DEXICON version 3.4.1 Description The issue allows for XSS via the loginName parameter in the "login action.jsp" endpoint. Recommendations For PCS DEXICON version 3.4.1, consider restricting access to the loginName parameter in the "login...