CVE-2025-34076

🗓️ 02 Jul 2025 19:27:03Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 25 Views🌐 WEB

Authenticated file inclusion vulnerability in Microweber CMS allows arbitrary file access via Backup API.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-34076	22 Feb 202218:41	–	circl
CNNVD	Microweber CMS 路径遍历漏洞	2 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-34076 Microweber CMS Authenticated Local File Inclusion via Backup API	2 Jul 202519:27	–	cvelist
EUVD	EUVD-2025-19754	3 Oct 202520:07	–	euvd
Github Security Blog	Microweber CMS API has authenticated local file inclusion vulnerability	2 Jul 202521:32	–	github
Metasploit	Microweber CMS v1.2.10 Local File Inclusion (Authenticated)	24 Feb 202217:42	–	metasploit
NVD	CVE-2025-34076	2 Jul 202520:15	–	nvd
OSV	GHSA-J64V-XH5W-8HQJ Microweber CMS API has authenticated local file inclusion vulnerability	2 Jul 202521:32	–	osv
Positive Technologies	PT-2025-27668 · Unknown · Microweber Cms	2 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-34076	4 Jul 202520:27	–	redhatcve

NVD

Vulners

CNA

Node

microweber microweberRange≤1.2.11

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "BackupV2/upload",
      "BackupV2/download",
      "src (upload)",
      "filename (download)"
    ],
    "product": "CMS",
    "vendor": "Microweber Ltd.",
    "versions": [
      {
        "lessThanOrEqual": "1.2.11",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/microweber/microweber/commit/572bdc36b5b47923790016f6b961c8df53226855
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/gather/microweber_lfi.rb
github	www.github.com/microweber/microweber
huntr	www.huntr.com/bounties/09218d3f-1f6a-48ae-981c-85e86ad5ed8b
github	www.github.com/microweber/microweber/commit/98d025467128ecc24195dcb56c533febc3c91af6
vulncheck	www.vulncheck.com/advisories/microweber-cms-lfi

Parameter	Position	Path	Description	CWE
src	query param	api/BackupV2/upload	Authenticated users can specify an absolute file path via src to read/upload arbitrary files due to insufficient path validation.	CWE-22
filename	query param	api/BackupV2/download	Authenticated users can retrieve files using a crafted filename to disclose arbitrary files due to insufficient access restrictions in backup logic.	CWE-22

29 Nov 2025 15:26Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.2

CVSS 46.1

EPSS0.48761

SSVC

CWE-22