DBconfigReader

Database Configuration Information Disclosure Vulnerability in the Weaver ecology OA System Interface /mobile/DBconfigReader.jsp http://x.x.x.x:8090/mobile/DBconfigReader.jsp Fortify Code Audit Detected - Weak Encryption Algorithm SecretKey key =...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-65829 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-65829 Source...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-65829 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-65829 Source...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-65829 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-65829 Source...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-61570 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-61570 Source...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-61570 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-61570 Source...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-61570 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-61570 Source...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-65829 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-65829 Source...

CVE-2016-20097

Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...

CVE-2022-50997

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

EUVD-2022-56016

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

CVE-2022-50997

The CVE-2022-50997 entry concerns Weaver (Fanwei) E-cology 8.0 and 9.0, where a SQL injection vulnerability exists in the HrmCareerApplyPerView.jsp endpoint. An unauthenticated attacker can manipulate the id parameter (via a crafted GET request) to perform UNION-based injections against a Microso...

CVE-2016-20097

CVE-2016-20097 involves Weaver (Fanwei) E-cology 8.0. A vulnerability in the SignatureDownLoad servlet allows unauthenticated remote attackers to perform a SQL injection via the markId parameter, which is concatenated into a query. This can let an attacker control the returned markPath value and ...

CVE-2016-20097 Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad

Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...

EUVD-2016-10910

Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...

PT-2026-70788

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

VulnCheck KEV: CVE-2016-20097

Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by unknown CVE via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: unknown CVE Source advisor...

com.github.liuzhenghui:weaver-ecology-parent (>=9.00.2110.07.220316, <=9.00.2112.03.220528) potentially affected by CVE-2026-61570 via net.sf.mpxj:mpxj (7.4.3)

net.sf.mpxj:mpxj MAVEN version 7.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.mpxj:mpxj and may be impacted: - com.github.liuzhenghui:weaver-ecology-parent =9.00.2110.07.220316, =9.00.2112.03.220528 Source cves: CVE-2026-61570 Source...