CVE-2024-48072

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...

PT-2024-32982

Name of the Vulnerable Software and Affected Versions Weaver Ecology versions 9. Description A SQL injection issue was discovered in the component /mobilemode/Action.jsp with specific parameters such as invoker, action, searchField, fromTable, whereClause, triggerCondition, expression, and...

CVE-2024-48072

The collaborative management platform Weaver Ecology v9. * is vulnerable to a SQL injection flaw. The vulnerability exists in the /mobilemode/Action.jsp component, specifically involving the com.weaver.formmodel.mobile.mec.servlet.MECAction invoker. An attacker can exploit the getFieldTriggerValu...