Weaver e-cology 安全漏洞

Weaver e-cology is a collaborative management application platform from China-based Weaver. A security vulnerability exists in Weaver e-cology v9 that could allow an authenticated attacker to perform directory traversal and arbitrarily delete files...

PT-2024-32978 · Unknown · Weaver E-Cology

Name of the Vulnerable Software and Affected Versions: Weaver E-cology versions 9. Description: A vulnerability in Weaver E-cology allows attackers to use race conditions to bypass security mechanisms, potentially leading to the upload of malicious files and control of server privileges...

CVE-2024-48069

Weaver E-cology (Weaver E-cology) is affected, specifically version 9.. The vulnerability stems from race conditions that allow bypassing security controls, enabling the upload of malicious files and potential control of server privileges. A related remote code execution issue is reported in the ...

CVE-2024-48070

An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server privileges...

CVE-2024-48071

CVE-2024-48071 affects E-cology/Weaver e-cology and is described as a directory traversal vulnerability that could enable an attacker to delete server files and cause permanent denial of service. Connected sources corroborate a traversal flaw but do not provide concrete exploit details, affected ...

CVE-2024-48072

Weaver Ecology v9. was discovered to contain a SQL injection vulnerability via the component...

CVE-2024-48070

CVE-2024-48070 affects Weaver E-cology. Multiple sources describe a vulnerability where attackers can craft requests to insert remote code and potentially execute code with server privileges, linked to a SQL injection issue in Weaver E‑cology v9.x. Affected component: SQL handling in Weaver E‑col...

Weaver e-cology 安全漏洞

Weaver e-cology is a collaborative management application platform from China's Weaver. A security vulnerability exists in Weaver e-cology v9, which is prone to SQL injection attacks...

CVE-2024-48072

CVE-2024-48072 affects Weaver Ecology v9., with a SQL injection vulnerability in the web component "/mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField= &fromTable=HrmResourceManager&whereClause=1%3d1&triggerCondition=1&expressi...

CVE-2024-7704

A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecologydev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack...

CVE-2024-7704

A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecologydev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack...

CVE-2024-7704 Weaver e-cology Source Code ecology_dev.zip information disclosure

A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecologydev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack...

CVE-2024-7704 Weaver e-cology Source Code ecology_dev.zip information disclosure

A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecologydev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack...

CVE-2024-7704

Weaver e-cology 8 is affected in the Source Code Handler component, via an issue in the file /cloudstore/ecode/setup/ecology_dev.zip. The vulnerability enables information disclosure and can be exploited remotely; exploitation has been disclosed publicly. The available connected docs do not speci...

PT-2024-38524 · Unknown · Weaver E-Cology

Name of the Vulnerable Software and Affected Versions: Weaver e-cology version 8 Description: A vulnerability was found in the Source Code Handler component of Weaver e-cology, affecting an unknown function of the file /cloudstore/ecode/setup/ecology dev.zip. This issue leads to information...

WordPress Weaver Xtreme Theme Support plugin cross-site scripting vulnerability (CNVD-2024-26460)

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-4939

The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all versions up to, and including, 6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2024-4939

The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all versions up to, and including, 6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2024-4939 Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode

The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all versions up to, and including, 6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

WordPress Weaver Xtreme Theme Support plugin <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via div Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Weaver Xtreme Theme Support versions = 6.4...