Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of valid validation of uploaded files by the application. An attacker could exploit this vulnerability to upload malicious files and thus execute arbitrary code remotely.
CPE | Name | Operator | Version |
---|---|---|---|
microweber microweber | lt | 1.2.11 |