Lucene search
+L

1398 matches found

Github Security Blog
Github Security Blog
added 2022/02/16 12:1 a.m.40 views

Microweber vulnerable to Improper Validation of Specified Quantity in Input

Microweber prior to version 1.2.11 can have a negative product amount. This could allow an attacker to manipulate the total value and get products for free...

5.4CVSS5AI score0.0062EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/02/16 12:1 a.m.29 views

Open redirect in microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS2.8AI score0.03019EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/02/16 12:1 a.m.52 views

GHSA-VPQ7-M4QM-P2GP Microweber vulnerable to Improper Validation of Specified Quantity in Input

Microweber prior to version 1.2.11 can have a negative product amount. This could allow an attacker to manipulate the total value and get products for free...

4.3CVSS4.4AI score0.0062EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/16 12:1 a.m.34 views

GHSA-RW98-5846-PQHX Open redirect in microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS6.1AI score0.03019EPSS
SaveExploits1References4
NVD
NVD
added 2022/02/15 2:15 p.m.31 views

CVE-2022-0597

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS0.03019EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/15 2:15 p.m.9 views

CVE-2022-0597

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS5.5AI score0.03019EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/02/15 2:15 p.m.8 views

CVE-2022-0596

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...

5.4CVSS5.7AI score0.0062EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/15 2:15 p.m.31 views

CVE-2022-0596

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...

5.4CVSS0.0062EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/15 2:15 p.m.16 views

Open redirect

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

5.8CVSS6.1AI score0.03019EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2022/02/15 2:15 p.m.16 views

Input validation

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...

4CVSS4.5AI score0.0062EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/15 1:50 p.m.40 views

CVE-2022-0597 Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

4.3CVSS6.4AI score0.03019EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/15 1:50 p.m.28 views

CVE-2022-0597 Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

4.3CVSS4.8AI score
SaveExploits0References4
CVE
CVE
added 2022/02/15 1:50 p.m.146 views

CVE-2022-0597

Microweber (packagist/microweber) vulnerability CVE-2022-0597: Open Redirect in versions prior to 1.2.11. The issue is triggered by a redirect_to parameter, enabling redirection to potentially malicious sites. Remediation: upgrade to version 1.2.11 or later. If exploits or in-the-wild details are...

6.1CVSS5.2AI score0.03019EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/02/15 12:0 a.m.10 views

Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. There is a security vulnerability in Microweber, there is no information about the...

5.4CVSS5.5AI score0.0062EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/02/15 12:0 a.m.49 views

Microweber command injection vulnerability

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A command injection vulnerability exists in Microweber, which stems from the failure of the...

9CVSS4AI score0.51193EPSS
SaveExploits4References1
OSV
OSV
added 2022/02/15 12:0 a.m.30 views

CVE-2022-0596 Improper Validation of Specified Quantity in Input in microweber/microweber

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...

5.4CVSS5.1AI score
SaveExploits0References4
CVE
CVE
added 2022/02/15 12:0 a.m.134 views

CVE-2022-0596

CVE-2022-0596 affects microweber/microweber prior to version 1.2.11. The vulnerability is due to improper validation of the specified quantity in input, allowing a negative product amount to be used. This could enable an attacker to manipulate the total value and, per multiple sources, obtain pro...

5.4CVSS4.6AI score0.0062EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/02/15 12:0 a.m.10 views

Packagist microweber 输入验证错误漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An input validation error vulnerability exists in Packagist microweber. No information...

6.1CVSS5.2AI score0.03019EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/02/15 12:0 a.m.2 views

PT-2022-13292 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.2.11 Description: The issue is related to an Open Redirect in Packagist microweber/microweber. Recommendations: For versions prior to 1.2.11, update to version 1.2.11 or later to resolve the issue...

6.1CVSS4.6AI score0.03019EPSS
SaveExploits1References9
Veracode
Veracode
added 2022/02/14 9:46 a.m.29 views

Open Redirect

microweber is vulnerable to open redirect. Lack of secure validation of URL allows an attacker to redirect the user to malicious URL...

6.1CVSS3AI score0.01036EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder