Weaver Network Co., Ltd.

7 CVEs across 4 Weaver Network Co., Ltd. products. Browse Weaver Network Co., Ltd. vulnerabilities, severities, and proof-of-concept exploits.

Weaver Network Co., Ltd. products with known CVEs

ProductCVEs
E-Cology3
E-Cology 8.02
E-Cology 9.02
E-Office1
Weaver Network Co., Ltd. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25776High7.52026-09-18Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious i…
CVE-2022-50997High7.52026-08-11Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attack…
CVE-2016-20097High7.52026-08-11Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbit…
CVE-2022-4995Critical9.82026-08-07Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary fil…
CVE-2022-50993Critical9.82026-04-30Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that a…
CVE-2022-50992High7.52026-04-30Weaver (Fanwei) E-cology 9.5 versions prior to 10.52 contain an arbitrary file read vulnerability in the XmlRpcServlet interface at the XML-RPC endpoint that a…
CVE-2026-22679Critical9.82026-04-07Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboA…