VYPR

Ecology

by Fanwei

CVEs (1)

  • CVE-2016-20097HigAug 11, 2026
    risk 0.49cvss 7.5epss 0.01

    Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a…