RULE(RULE ID:338988)

Rule General Information
Release Date: 2025-06-04
Rule Name: Weaver E-Office login_other.php SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Weaver E-Office is a lightweight OA product designed for small and medium-sized enterprises. It features simple deployment, quick launch, and low maintenance costs. It provides ready-to-use functions such as approval, attendance, document management, and project management. There is a SQL injection vulnerability in the login_other.php of Weaver E-Office. Attackers can exploit this vulnerability to steal sensitive information, tamper with database data, take control of the database server, and potentially further intrude into the entire system.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.