Weaver E-Mobile Remote Code Execution Scanner

Weaver E-Mobile is an enterprise mobile management platform used by organizations to streamline communications, workflow automation, and data processing on mobile devices. IT administrators and system managers deploy it to enhance operational efficiency and secure mobile access to corporate resources. It integrates with existing IT infrastructure, supporting tasks like approval workflows, notifications, and file sharing across departments.

The Remote Code Execution (RCE) vulnerability in Weaver E-Mobile arises from insufficient input validation and sanitization of user-supplied data. Attackers can inject malicious payloads into parameters that are processed by the server without proper filtering, allowing arbitrary code execution. This flaw is critical because it bypasses standard security controls and can be exploited remotely without authentication.

Specifically, the vulnerability exists in the file upload functionality of the /api/upload endpoint. The application fails to validate the content type or file extension of uploaded files, enabling attackers to upload a crafted PHP or JSP file containing malicious code. Once uploaded, the file can be accessed and executed, granting the attacker control over the server.

Successful exploitation can lead to full system compromise, including unauthorized access to sensitive data, installation of backdoors, and lateral movement within the network. The CVSS score of 9.0 reflects the high impact on confidentiality, integrity, and availability. Organizations using Weaver E-Mobile v6.0 are at immediate risk of data breaches and operational disruption.