Arbitrary File Download Vulnerability in Panmicro E-Weaver of Shanghai Panmicro Network Technology Co.

E-Weaver is the Pan-Micro collaboration management platform. Ltd. Panmicro E-Weaver suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Panmicro e-Weaver System

e-Weaver system is a Panmicro OA office software. A SQL injection vulnerability exists in the e-Weaver System/ServiceAction/com.eweaver.base.DataAction page of Panmicro, which can be exploited in a comprehensive manner to allow an attacker to obtain sensitive information about the database...