Skip to content
OpenAdvisories

Vendor

Weaver

11 known vulnerabilities.

Products

E-cology 4 E-Office 3 OA 2 e-Bridge 1 E-Mobile Mobile Management Platform 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2020-37278

    Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

    Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit th…

    Weaver e-Bridge
  • High 8.7
    CVE-2025-34038

    Weaver E-cology SQL Injection

    A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the c…

    Weaver E-cology
  • High 7.3
    CVE-2023-2523 Public exploit EPSS 33%

    Weaver E-Office unrestricted upload

    A vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax.php?action=mobile_upload_save. The manipulation of the argument upload_quwan leads to unrestricted …

    Weaver E-Office