Read the docs
TI-2016-09273 Aliases CVE-2016-20097GHSA-8r52-43hm-h433

Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad

Priority HIGH 77CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
SQL injection
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers can control the markPath value returned by the query to supply an attacker-controlled filesystem path, causing the servlet to read and stream back arbitrary files accessible to the application server process, including sensitive configuration files containing database credentials. Disclosure materials indicate that this vulnerability has been remediated, but it's unclear which version resolved the issue. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18 (UTC).

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00632 50th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Weaver Network Co., Ltd.E-cology 8.0all versions—No fix listedCNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-20097
  2. 2026-10-03 Alias added: GHSA-8r52-43hm-h433
  3. 2026-10-26 EPSS moved to the 50th–90th percentile

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2022-26434 Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet CVSS 4.0CRITICAL 9.3
  • TI-2022-04582 Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp CVSS 4.0CRITICAL 9.3
  • TI-2025-43962 Unauthenticated SQL injection in Weaver E-cology CVSS 4.0HIGH 8.8
  • TI-2022-26436 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp CVSS 4.0HIGH 8.7
  • TI-2021-22764 Unauthenticated path traversal in Weaver E-cology reads server files CVSS 4.0HIGH 8.7
  • TI-2019-15817 Weaver E-cology SQL Injection via SyncUserInfo.jsp CVSS 4.0HIGH 8.7
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences