Skip to content
OpenAdvisories

Product · Weaver

E-cology

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-34038 Scanner template

    Weaver E-cology SQL Injection

    A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the c…