GCVE - cpe:2.3:a:weaver:e-cology:9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:weaver:e-cology:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

Vendor	Weaver (`d1eebdd6-dd11-5049-a599-082708582d07`)
Product	E Cology (`42de33b5-225f-5e72-b918-e43cedcb3769`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-48072`	vulnerable	2026-06-08 06:48:13.607398	Details available Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField=*&fromTable=HrmResourceManager&whereClause=1%3d1&triggerCondition=1&expression=%3d&fieldValue=1. Published: 2024-11-19T00:00:00.000Z Updated: 2024-11-21T16:31:38.408Z Open on db.gcve.eu Reference links https://github.com/stuven1989/TemporaryGuild/blob/main/files/exp-eng4.pdf https://gist.github.com/CoinIsMoney/8ca1f2bf2e0399724c698327f2da8579	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48071`	vulnerable	2026-06-08 06:48:13.604909	Details available E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the server to permanently deny service. Published: 2024-11-19T00:00:00.000Z Updated: 2024-11-21T16:38:59.609Z Open on db.gcve.eu Reference links https://github.com/stuven1989/TemporaryGuild/blob/main/files/exp-eng-3.pdf https://gist.github.com/CoinIsMoney/d437f267f2d65cb80dd7da97cb2068e8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48070`	vulnerable	2026-06-08 06:48:13.604605	Details available An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server privileges Published: 2024-11-19T00:00:00.000Z Updated: 2024-11-21T16:36:00.273Z Open on db.gcve.eu Reference links https://github.com/stuven1989/TemporaryGuild/blob/main/files/exp2-eng.pdf https://gist.github.com/CoinIsMoney/ec863c35dfd05c7deea2afea11bf2446	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48069`	vulnerable	2026-06-08 06:48:13.604038	Details available A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server privileges Published: 2024-11-19T00:00:00.000Z Updated: 2024-11-21T16:32:21.047Z Open on db.gcve.eu Reference links https://github.com/stuven1989/TemporaryGuild/blob/main/guild2.md https://gist.github.com/CoinIsMoney/5dd555805e8f974630ced8a1df8182f1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2806`	vulnerable	2026-06-08 06:02:43.037380	Weaver e-cology API RequestInfoByXml xml external entity reference MEDIUM (5.5) A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2023-05-19T08:31:02.728Z Updated: 2024-11-22T19:48:00.155Z Open on db.gcve.eu Reference links https://vuldb.com/?id.229411 https://vuldb.com/?ctiid.229411 https://github.com/Strangenees/e-cology/blob/main/main.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10272`	vulnerable	2026-06-08 05:12:23.086480	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.