E-cology 9.0 vulnerabilities

2 known vulnerabilities in E-cology 9.0 from Weaver Network. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  E-cology 9.0: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-50997Aug 11, 2026Weaver Network

  Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attacke

• 9.8 Critical severity

  E-cology 9.0: Unrestricted Upload of File with Dangerous Type

  CVE-2022-4995Aug 7, 2026Weaver NetworkEPSS 1.18%

  Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/uti