Microweber remote code execution vulnerability

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A remote code execution vulnerability exists in versions of microweber prior to 1.2.12, which stems from the fact that administrators can use the Backup module to upload malicious PHP files, which can be exploited by attackers to cause remote code execution.