1712 matches found
CVE-2022-0929: Improper Neutralization of Input During Web Page Generation
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0926: Improper Neutralization of Input During Web Page Generation
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber before 1.2.11. The vulnerability stems fro...
Microweber 跨站脚本漏洞
Microweber is a drag-and-drop website builder and CMS based on the PHP Laravel framework. Microweber suffers from a cross-site scripting vulnerability, which can be exploited by attackers to upload . azhtml file e.g. ahtml, bhtml, chtml, ddhtml, as long as it ends in html. After uploading,...
PT-2022-13534
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.12 Description The issue is related to a file upload filter bypass, which can lead to stored XSS. Recommendations For versions prior to 1.2.12, update to version 1.2.12 or later to resolve the issue...
CVE-2022-0921
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921
The CVE-2022-0921 entry concerns Microweber up to version 1.2.12 where the Backup/Restore feature can be abused to achieve Remote Code Execution. Affected software: microweber/microweber. Root cause: improper handling of backups/uploads allows an attacker to place or execute malicious PHP via the...
CVE-2022-0921
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928
Microweber
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
