China National Vulnerability DatabaseCNVD-2022-86315Microweber has a host header injection vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Microweber is a drag-and-drop online store management system from the US Microweber community. The system includes modules for adding products, images, etc. A host header injection vulnerability exists in Microweber v1.2.15. An attacker can exploit this vulnerability to take over an account via host header injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microweber microweber v | eq | 1.2.15 |
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H