Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-21817
HistoryMar 15, 2022 - 12:00 a.m.

Microweber file upload vulnerability

2022-03-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.001 Low

EPSS

Percentile

21.6%

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of valid validation of uploaded files by the application. An attacker could exploit this vulnerability to upload malicious files and thus execute arbitrary code remotely.

CPENameOperatorVersion
microweber microweberlt1.2.11

0.001 Low

EPSS

Percentile

21.6%