CVE-2024-48072

概要

参考情報

• gist.github.com/CoinIsMoney/8ca1f2bf2e0399724c698327f2da8579 · Third Party Advisory
• stuven1989/TemporaryGuild · Broken Link

e-cology のその他の脆弱性

• CVE-2026-22679緊急 9.8Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch…
• CVE-2025-34038高 7.5A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user i…
• CVE-2024-48070緊急 9.8An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution,…
• CVE-2024-48069緊急 9.8A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an…
• CVE-2024-48071中 6.5E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the ser…