Weaver Network Co., Ltd.

Products

ProductCVEsExploitedLatest
E-cology4–Oct 22, 2026
E-cology 9.02–Aug 11, 2026
E-cology 8.01–Aug 11, 2026
E-office1–Apr 30, 2026

Exploited and recent CVEs

  • CVE-2025-71434 High 8.2 Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/list 0.3%
  • CVE-2021-48013 High 7.5 Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload 0.7%
  • CVE-2022-50997 High 7.5 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp 0.6%
  • CVE-2022-50997 High 7.5 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp 0.6%
  • CVE-2022-4995 Critical 9.8 Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp 1.2%
  • CVE-2022-50992 High 7.5 Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet 0.7%
  • CVE-2022-50993 Critical 9.8 Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet 0.8%
  • CVE-2026-22679 Critical 9.8 Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint 20.7%