Weaver e-cology OA SQL Injection Vulnerability Advisory

Vulnerability Overview Vulnerability Name: Weaver OA SQL Injection Vulnerability Vulnerability ID: SSV-98091 Submission Date: 2018-10-18 Vulnerability Type: SQL Injection Component: e-cology Author: Unknown Submitter: Knowsec CVE-ID: Not provided CNNVD-ID: Not provided CNVD-ID: Not provided ZoomEye Dork: Not provided Affected Scope This is a generic vulnerability in Weaver OA. Attackers can perform injection attacks by crafting malicious payloads. Successful exploitation allows attackers to retrieve data from the server. Current statistics indicate that there are over 6,000 globally accessible internet assets running Weaver OA, with the majority located in China. Remediation The vendor has released patches for this vulnerability. Please contact the vendor for the latest vulnerability status and patch updates. Download Link: https://www.weaver.com.cn/cs/securityDownload.asp POC Code No specific POC code is provided on the page; it only displays "Unavailable PoC". Additional Information Related Vulns: The page lists several related vulnerabilities, including the E-cology Remote Code Execution (RCE) vulnerability and the ecology filedownload directory traversal vulnerability. Solutions: The page provides temporary, official, and defensive solutions, but all are displayed as "Unavailable". Summary This page details the information regarding the Weaver OA SQL Injection vulnerability, including the vulnerability overview, affected scope, and remediation steps. While links to related vulnerabilities and solutions are provided, specific POC codes and solutions are not available.

Goal Reached Thanks to every supporter — we hit 100%!

Weaver e-cology OA SQL Injection Vulnerability Advisory