CVE-2019-10272

概要

参考情報

• expzh.com/Weaver-e-cology9.0-CRLF-Injection.pdf · Exploit
• weaver.com.cn/cs/securityDownload.asp · Vendor Advisory

e-cology のその他の脆弱性

• CVE-2026-22679緊急 9.8Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch…
• CVE-2025-34038高 7.5A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user i…
• CVE-2024-48072緊急 9.8Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.form…
• CVE-2024-48070緊急 9.8An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution,…
• CVE-2024-48069緊急 9.8A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an…