Vulnerability · Published Aug 7, 2026 · Assigned by VulnCheck

CVE-2022-4995Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

Critical 9.8

In plain English

A critical-severity unrestricted file upload in E-cology 9.0 from Weaver Network Co., Ltd.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)1.2%top 32.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary secId and plandetailid field values. Successful exploitation results in remote code execution under the privileges of the application server process. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14 (UTC).

Affected products (as reported)

Vendor	Product	Versions
Weaver Network Co., Ltd.	E-cology 9.0	0 – before 10.52

Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.weaver.com.cn/cs/securityDownload.html# patch
https://www.weaver.com.cn/cs/ecology_full_log_en.html release-notes
https://cn-sec.com/archives/1208148.html third-party-advisory
https://ch0x01e.github.io/post/ecology9-wen-jian-shang-chuan-fen-xi/ technical-description, exploit
https://github.com/gmh5225/CVE-2022-HW-POC/blob/main/%E6%B3%9B%E5%BE%AEOA%20uploaderOperate.jsp%20%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md technical-description, exploit
https://www.vulncheck.com/advisories/weaver-e-cology-file-upload-rce-via-uploaderoperate-jsp third-party-advisory