cve-2025-34038

{
  "advisories": [
    {
      "id": "EUVD-2025-19038",
      "source": "euvd",
      "title": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes.",
      "url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19038"
    }
  ],
  "cve": "CVE-2025-34038",
  "epss": {
    "score": 0.02028
  },
  "mitre": {
    "cpes": [
      "cpe:2.3:a:weiphp:weiphp:*:*:*:*:*:*:*:*"
    ],
    "created": "2025-06-24T01:06:35.820000+00:00",
    "description": "A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {},
      "cvssV4_0": {
        "score": 8.7,
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
      }
    },
    "mitre_repo_path": "cves/2025/34xxx/CVE-2025-34038.json",
    "references": [
      "https://vulncheck.com/advisories/fanwei-ecology-sql-injection",
      "https://weaver.com.co/products/ecology/",
      "https://www.cnblogs.com/0day-li/p/14637680.html",
      "https://www.cnvd.org.cn/flaw/show/CNVD-2021-33202"
    ],
    "title": "Weaver E-cology SQL Injection",
    "updated": "2026-05-14T02:07:26.667000+00:00",
    "vendors": [
      "weiphp",
      "weiphp$PRODUCT$weiphp"
    ],
    "weaknesses": [
      "CWE-89"
    ]
  },
  "nvd": {
    "cpes": [
      "cpe:2.3:a:weaver:e-cology:*:*:*:*:*:*:*:*"
    ],
    "created": "2025-06-24T02:15:21.667000+00:00",
    "description": "A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 7.5,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
      },
      "cvssV4_0": {
        "score": 8.7,
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
      }
    },
    "nvd_repo_path": "2025/CVE-2025-34038.json",
    "references": [
      "https://vulncheck.com/advisories/fanwei-ecology-sql-injection",
      "https://weaver.com.co/products/ecology/",
      "https://www.cnblogs.com/0day-li/p/14637680.html",
      "https://www.cnvd.org.cn/flaw/show/CNVD-2021-33202"
    ],
    "title": null,
    "updated": "2026-06-17T09:13:21.357000+00:00",
    "vendors": [
      "weaver",
      "weaver$PRODUCT$e-cology"
    ],
    "weaknesses": [
      "CWE-89"
    ]
  },
  "opencve": {
    "changes": [
      {
        "created": "2025-06-24T01:45:00+00:00",
        "data": [
          {
            "details": {
              "new": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 and prior via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes.",
              "old": null
            },
            "type": "description"
          },
          {
            "details": {
              "new": "Fanwei e-cology SQL Injection",
              "old": null
            },
            "type": "title"
          },
          {
            "details": {
              "added": [
                "CWE-89"
              ],
              "removed": []
            },
            "type": "weaknesses"
          },
          {
            "details": {
              "added": [
                "https://vulncheck.com/advisories/fanwei-e-cology-sql-injection",
                "https://www.cnblogs.com/0day-li/p/14637680.html",
                "https://www.cnvd.org.cn/flaw/show/CNVD-2021-33202",
                "https://www.weaver.com.cn/"
              ],
              "removed": []
            },
            "type": "references"
          },
          {
            "details": {
              "added": {
                "cvssV4_0": {
                  "score": 8.7,
                  "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "e0a93104-f3b4-433b-8751-c32347fe0d8c"
      },
      {
        "created": "2025-06-24T03:15:00+00:00",
        "data": [
          {
            "details": {
              "new": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes.",
              "old": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 and prior via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes."
            },
            "type": "description"
          },
          {
            "details": {
              "added": [
                "https://vulncheck.com/advisories/fanwei-ecology-sql-injection"
              ],
              "removed": []
            },
            "type": "references"
          }
        ],
        "id": "230792d1-ef68-4d83-aa4f-3b0f37f7d549"
      },
      {
        "created": "2025-06-24T04:45:00+00:00",
        "data": [
          {
            "details": {
              "added": [],
              "removed": [
                "https://vulncheck.com/advisories/fanwei-e-cology-sql-injection"
              ]
            },
            "type": "references"
          }
        ],
        "id": "45e104e8-8cf2-4067-9437-088431fbf2f5"
      },
      {
        "created": "2025-06-24T16:15:00+00:00",
        "data": [
          {
            "details": {
              "added": {
                "ssvc": {
                  "options": {
                    "Automatable": "yes",
                    "Exploitation": "poc",
                    "Technical Impact": "partial"
                  },
                  "version": "2.0.3"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "43b0cbc3-2583-488b-973c-b1e7b5b278ff"
      },
      {
        "created": "2025-09-23T19:30:00+00:00",
        "data": [
          {
            "details": [
              "weaver",
              "weaver$PRODUCT$e-cology"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "cpe:2.3:a:weaver:e-cology:*:*:*:*:*:*:*:*"
              ],
              "removed": []
            },
            "type": "cpes"
          },
          {
            "details": {
              "added": [
                "weaver",
                "weaver$PRODUCT$e-cology"
              ],
              "removed": []
            },
            "type": "vendors"
          },
          {
            "details": {
              "added": {
                "cvssV3_1": {
                  "score": 7.5,
                  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "4de0ca97-ed78-43c7-a160-3d8313eaa1b1"
      },
      {
        "created": "2025-11-17T22:00:00+00:00",
        "data": [
          {
            "details": {
              "new": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-13 UTC.",
              "old": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes."
            },
            "type": "description"
          }
        ],
        "id": "70f4e1f4-d118-466c-aad5-a2406fcaa821"
      },
      {
        "created": "2025-11-20T21:30:00+00:00",
        "data": [
          {
            "details": {
              "new": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.",
              "old": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-13 UTC."
            },
            "type": "description"
          }
        ],
        "id": "742070fd-bd40-42aa-a3a6-22f4d6ad52bd"
      },
      {
        "created": "2025-11-29T15:30:00+00:00",
        "data": [
          {
            "details": [
              "weiphp",
              "weiphp$PRODUCT$weiphp"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "cpe:2.3:a:weiphp:weiphp:*:*:*:*:*:*:*:*"
              ],
              "removed": []
            },
            "type": "cpes"
          },
          {
            "details": {
              "added": [
                "weiphp",
                "weiphp$PRODUCT$weiphp"
              ],
              "removed": []
            },
            "type": "vendors"
          }
        ],
        "id": "56f67b1d-cf8a-4eef-9bbc-3c73d44689c1"
      },
      {
        "created": "2026-01-27T21:15:00+00:00",
        "data": [
          {
            "details": {
              "new": "A SQL injection vulnerability exists in Weaver e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.",
              "old": "A SQL injection vulnerability exists in Fanwei e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC."
            },
            "type": "description"
          },
          {
            "details": {
              "new": "Weaver e-cology SQL Injection",
              "old": "Fanwei e-cology SQL Injection"
            },
            "type": "title"
          },
          {
            "details": {
              "added": [
                "https://weaver.com.co/products/ecology/"
              ],
              "removed": []
            },
            "type": "references"
          }
        ],
        "id": "a14d6299-d70f-437e-a897-3896194c62bf"
      },
      {
        "created": "2026-01-27T21:30:00+00:00",
        "data": [
          {
            "details": {
              "new": "A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.",
              "old": "A SQL injection vulnerability exists in Weaver e-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC."
            },
            "type": "description"
          },
          {
            "details": {
              "new": "Weaver E-cology SQL Injection",
              "old": "Weaver e-cology SQL Injection"
            },
            "type": "title"
          },
          {
            "details": {
              "added": [],
              "removed": [
                "https://www.weaver.com.cn/"
              ]
            },
            "type": "references"
          }
        ],
        "id": "402d27c3-57a4-4fe5-8d28-ce299d79b86e"
      }
    ],
    "cpes": {
      "data": [
        "cpe:2.3:a:weaver:e-cology:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:weiphp:weiphp:*:*:*:*:*:*:*:*"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    },
    "created": {
      "data": "2025-06-24T01:06:35.820000+00:00",
      "provider": "mitre"
    },
    "description": {
      "data": "A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.",
      "provider": "mitre"
    },
    "metrics": {
      "cvssV2_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_1": {
        "data": {
          "score": 7.5,
          "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        },
        "provider": "nvd"
      },
      "cvssV4_0": {
        "data": {
          "score": 8.7,
          "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        },
        "provider": "mitre"
      },
      "epss": {
        "data": {
          "score": 0.02028
        },
        "provider": "first"
      },
      "kev": {
        "data": {},
        "provider": null
      },
      "ssvc": {
        "data": {
          "options": {
            "Automatable": "yes",
            "Exploitation": "poc",
            "Technical Impact": "partial"
          },
          "version": "2.0.3"
        },
        "provider": "vulnrichment"
      },
      "threat_severity": {
        "data": null,
        "provider": null
      }
    },
    "references": {
      "data": [
        "https://vulncheck.com/advisories/fanwei-ecology-sql-injection",
        "https://weaver.com.co/products/ecology/",
        "https://www.cnblogs.com/0day-li/p/14637680.html",
        "https://www.cnvd.org.cn/flaw/show/CNVD-2021-33202"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    },
    "title": {
      "data": "Weaver E-cology SQL Injection",
      "provider": "mitre"
    },
    "updated": {
      "data": "2026-01-27T21:20:55.873000+00:00",
      "provider": "mitre"
    },
    "vendors": {
      "data": [
        "weaver",
        "weaver$PRODUCT$e-cology",
        "weiphp",
        "weiphp$PRODUCT$weiphp"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    },
    "weaknesses": {
      "data": [
        "CWE-89"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    }
  },
  "vulnrichment": {
    "cpes": [],
    "created": "2025-06-24T01:06:35.820000+00:00",
    "description": "A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows unauthenticated attackers to execute arbitrary SQL queries, potentially exposing sensitive data such as administrator password hashes. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {},
      "cvssV4_0": {},
      "kev": {},
      "ssvc": {
        "options": {
          "Automatable": "yes",
          "Exploitation": "poc",
          "Technical Impact": "partial"
        },
        "version": "2.0.3"
      }
    },
    "references": [],
    "title": "Weaver E-cology SQL Injection",
    "updated": "2025-06-24T15:50:22.286000+00:00",
    "vendors": [],
    "vulnrichment_repo_path": "2025/34xxx/CVE-2025-34038.json",
    "weaknesses": []
  }
}