CVE-2016-20097
Received Received - Intake

SQL Injection in Weaver E-cology SignatureDownLoad Servlet

Publication date: 2026-08-11

Last updated on: 2026-08-14

Assigner: VulnCheck

Description
Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers can control the markPath value returned by the query to supply an attacker-controlled filesystem path, causing the servlet to read and stream back arbitrary files accessible to the application server process, including sensitive configuration files containing database credentials. Disclosure materials indicate that this vulnerability has been remediated, but it's unclear which version resolved the issue. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18 (UTC).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-14
Generated
2026-09-01
AI Q&A
2026-08-12
EPSS Evaluated
2026-08-30
NVD
CVE-2016-20097
EUVD
EUVD-2016-10910

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
fanwei e-cology 8.0
shanghai_weaver_network_technology_co_ltd e-cology 8.0
shanghai_weaver_network_technology_co_ltd e-cology From 8.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2016-20097 is a SQL injection vulnerability in Weaver (Fanwei) E-cology 8.0's SignatureDownLoad servlet. It allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter. The unsanitized input is concatenated into a SQL query, enabling attackers to control the markPath value and read sensitive files like configuration files containing database credentials.

Detection Guidance

To detect CVE-2016-20097, check if your Weaver E-cology system is running version 8.0 or earlier. Test for SQL injection in the SignatureDownLoad servlet by sending a crafted GET request with a UNION SELECT payload in the markId parameter, such as: GET /weaver/ecology/signaturedownLoad?markId=1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40-- HTTP/1.1. If the server responds with file contents, the system is vulnerable.

Impact Analysis

This vulnerability allows attackers to read sensitive files on the server, including configuration files with database credentials. This could lead to unauthorized data access, potential data breaches, and further exploitation of the system. Attackers can also gain insights into the application's internal workings to plan additional attacks.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. Organizations using affected Weaver E-cology versions may face compliance violations, legal penalties, and reputational damage due to potential data breaches.

Mitigation Strategies

Immediately apply the official patch released by Shanghai Weaver Network Technology Co., Ltd. in July 2016. If patching is not immediately possible, restrict network access to the SignatureDownLoad servlet, monitor for suspicious SQL queries, and ensure sensitive files are not accessible to the application server process. Upgrade to a supported version like E10 (v20260312) or later as per vendor recommendations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2016-20097. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart