CVE-2025-34038

Mô tả

Tham khảo

• vulncheck.com/advisories/fanwei-ecology-sql-injection · Exploit
• weaver.com.co/products/ecology
• cnblogs.com/0day-li/p/14637680.html · Exploit
• cnvd.org.cn/flaw/show/CNVD-2021-33202 · Third Party Advisory

Lỗ hổng khác của e-cology

• CVE-2026-22679NGHIÊM TRỌNG 9.8Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch…
• CVE-2024-48072NGHIÊM TRỌNG 9.8Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.form…
• CVE-2024-48070NGHIÊM TRỌNG 9.8An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution,…
• CVE-2024-48069NGHIÊM TRỌNG 9.8A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files an…
• CVE-2024-48071TRUNG BÌNH 6.5E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the ser…