Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-20578
HistoryMar 15, 2022 - 12:00 a.m.

Microweber integer overflow vulnerability

2022-03-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
microweber
integer overflow
vulnerability
denial of service
online store
management system
address fields

EPSS

0.001

Percentile

37.9%

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An integer overflow vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from the fact that the application allows large characters to be inserted into input fields such as “Town, ZIP, State, Address and Additional Info fields”, which can be exploited to cause a denial of service.

EPSS

0.001

Percentile

37.9%