RULE(RULE ID:338260)

Rule General Information
Release Date: 2024-07-16
Rule Name: Weaver OA E-Cology9 WorkflowServiceXml SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Weaver E-Cology9 is an enterprise level collaborative office platform. It supports information sharing, communication and collaboration, and knowledge management within the enterprise by integrating a variety of office applications and workflow to improve work efficiency and organizational management capabilities. There is a SQL injection vulnerability in the WorkflowServiceXml interface of panmicro E-Cology9, through which an attacker can inject malicious SQL statements that may cause remote code execution
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.