Weaver E-cology SQL injection vulnerability

Weaver E-cology versions 8.0, 9.0, and 10.0 prior to 10.76 contain an SQL injection vulnerability. This vulnerability allows unauthenticated attackers to perform SQL injection on the /api/doc/out/more/list endpoint via the elementmore parameter srcType=2. They can then inject SQL statements using...