CVE-2026-22679 | Critical | 9.8 | 2026-04-07 | Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboA… |
CVE-2025-9590 | Low | 3.5 | 2025-08-28 | A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813. Affected by this vulnerability is an unknown functionality. The ma… |
CVE-2025-34038 | High | 7.5 | 2025-06-24 | A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql p… |
CVE-2024-48072 | Critical | 9.8 | 2024-11-19 | Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.se… |
CVE-2024-48070 | Critical | 9.8 | 2024-11-19 | An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server… |
CVE-2024-48069 | Critical | 9.8 | 2024-11-19 | A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server pr… |
CVE-2024-48071 | Medium | 6.5 | 2024-11-19 | E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the server to permanently… |
CVE-2024-7704 | Medium | 5.3 | 2024-08-12 | A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecol… |
CVE-2024-3227 | Medium | 4.7 | 2024-04-03 | A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /general/system… |
CVE-2023-51892 | Critical | 9.8 | 2024-01-20 | An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component. |
CVE-2023-34798 | Critical | 9.8 | 2023-07-25 | An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file. |
CVE-2023-3793 | Medium | 5.5 | 2023-07-20 | A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc… |
CVE-2023-2806 | Medium | 5.5 | 2023-05-19 | A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the compon… |
CVE-2023-2766 | Medium | 5.3 | 2023-05-17 | A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobi… |
CVE-2023-2765 | Medium | 4.3 | 2023-05-17 | A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/F… |
CVE-2023-2648 | Medium | 6.3 | 2023-05-11 | A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify… |
CVE-2023-2647 | Medium | 6.3 | 2023-05-11 | A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroot/inc/util… |
CVE-2023-2523 | High | 7.3 | 2023-05-04 | A vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax… |
CVE-2019-16133 | Medium | 6.5 | 2019-09-09 | An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can… |
CVE-2019-10272 | Medium | 6.1 | 2019-04-30 | An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parame… |