Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-12759
HistoryFeb 15, 2022 - 12:00 a.m.

Microweber command injection vulnerability

2022-02-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.041 Low

EPSS

Percentile

92.2%

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A command injection vulnerability exists in Microweber, which stems from the failure of the network system or product to properly filter special characters, commands, etc. during the execution of commands entered by users in the construct. An attacker could use this vulnerability to take full control of a vulnerable system, disclose sensitive data, or perform privilege escalation.

CPENameOperatorVersion
microweber microweberlt1.2.11