CVE-2022-0666

CVE-2022-0666 affects microweber/microweber prior to 1.2.11. The vulnerability is a CRLF Injection caused by lack of filtering in redirects (notably the redirect_to/redirectUrl path), leading to stack trace exposure. Nuclei and Veracode listings corroborate the issue and note potential impact suc...

CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0660

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0660

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

Information disclosure

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0660 Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0660

Microweber before 1.2.11 is affected by an information-disclosure vulnerability in microweber/microweber. An error message generated when viewing load_module:comments#search exposes sensitive information, potentially enabling an attacker to obtain sensitive data and, per the nuclei template, poss...

GHSA-GHWW-CV4V-HMXX Cross-Site Request Forgery microweber

microweber prior to version 1.2.11 is vulnerable to Cross-Site Request Forgery CSRF...

Cross-Site Request Forgery microweber

microweber prior to version 1.2.11 is vulnerable to Cross-Site Request Forgery CSRF...

microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in microweber, which is caused by the generation of erro...

Microweber 注入漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. Microweber suffers from an injection vulnerability that originates due to a lack of...

CVE-2022-0638

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0638

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0638

CVE-2022-0638: Cross-Site Request Forgery in microweber/microweber prior to 1.2.11. Multiple sources confirm a CSRF vulnerability in microweber versions before 1.2.11. Reported impact includes the ability for an attacker to cause user logout via forged requests (per Huntr details; other entries d...

CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

Microweber 跨站请求伪造漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in versions of microweber prior to...

Open Redirect

microweber is vulnerable to open redirect. An attacker is able to avert a user to a malicious website via an extra slash '/' through the logout function in the UserManager...