CVE-2019-10272

Mô tả

Tham khảo

• expzh.com/Weaver-e-cology9.0-CRLF-Injection.pdf · Exploit
• weaver.com.cn/cs/securityDownload.asp · Vendor Advisory

Lỗ hổng khác của e-cology

• CVE-2026-22679NGHIÊM TRỌNG 9.8Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch…
• CVE-2025-34038CAO 7.5A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user i…
• CVE-2024-48072NGHIÊM TRỌNG 9.8Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.form…
• CVE-2024-48070NGHIÊM TRỌNG 9.8An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution,…
• CVE-2024-48069NGHIÊM TRỌNG 9.8A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an…