Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WeaverE-cology

8 matches found

CVE
CVE•added 2023/07/20 8:15 p.m.•59 views

CVE-2023-3793

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql inject...

9.8CVSS7AI score0.00045EPSS
CVE
CVE•added 2024/08/12 9:15 p.m.•38 views

CVE-2024-7704

A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecology_dev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack remo...

7.5CVSS5.2AI score0.00136EPSS
CVE
CVE•added 2019/04/30 6:29 p.m.•37 views

CVE-2019-10272

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.

6.1CVSS6.4AI score0.00359EPSS
CVE
CVE•added 2024/11/19 6:15 p.m.•36 views

CVE-2024-48072

Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField=*&fromTable=HrmResourceManager&whereClause=1%3d1&triggerCondition=1&expression=%3d&f...

9.8CVSS8.3AI score0.00077EPSS
CVE
CVE•added 2023/05/19 9:15 a.m.•35 views

CVE-2023-2806

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The v...

8.8CVSS7AI score0.00131EPSS
CVE
CVE•added 2024/11/19 6:15 p.m.•35 views

CVE-2024-48069

A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server privileges

9.8CVSS6.7AI score0.00114EPSS
CVE
CVE•added 2024/11/19 6:15 p.m.•35 views

CVE-2024-48070

An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server privileges

9.8CVSS6.8AI score0.00303EPSS
CVE
CVE•added 2024/01/20 1:15 a.m.•32 views

CVE-2023-51892

An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.

9.8CVSS9.4AI score0.02872EPSS