CVE-2022-0912

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0912 Unrestricted Upload of File with Dangerous Type in microweber/microweber

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0913

Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0913 Integer Overflow or Wraparound in microweber/microweber

Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...

Cross-site Scripting (XSS)

microweber/microweber, is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of input sanitization in the file upload in the Files.php file allowing an attacker to bypass the system...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting. An attacker is able to input malicious HTML tags in certain user input fields which will be executed on the client browser...

Unrestricted file upload leads to stored cross-site scripting in Microweber

Microweber prior to version 1.2.12 allows unrestricted file upload, which could lead to stored cross-site scripting...

GHSA-HF4Q-52X6-4P57 Unrestricted file upload leads to stored cross-site scripting in Microweber

Microweber prior to version 1.2.12 allows unrestricted file upload, which could lead to stored cross-site scripting...

Static Code Injection in Microweber

Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection...

GHSA-X28W-HVWC-MP75 Static Code Injection in Microweber

Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection...

Microweber cross-site scripting vulnerability (CNVD-2022-20098)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber before 1.3, which stems from t...

PT-2022-13532

Name of the Vulnerable Software and Affected Versions microweber versions prior to 1.2.12 Description The issue is related to Cross-site Scripting XSS - Stored, which was discovered in the microweber drag and drop website builder and CMS with e-commerce. There is no known workaround for this issu...

PT-2022-13520

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue is related to the unrestricted upload of files with dangerous types in the GitHub repository microweber/microweber. Recommendations For versions prior to 1.2.11, update to...

CVE-2022-0921: Improper Control of Generation of Code

Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0912: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0913: Integer Overflow or Wraparound

Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...

Microweber 代码问题漏洞

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A remote code execution vulnerability exists in versions of microweber prior to 1.2.12, which...

Microweber 跨站脚本漏洞

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber 1.2.11 and earlier versions, which stems from a lack of filterin...

Microweber 输入验证错误漏洞

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An integer overflow vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from the fact tha...

Microweber 代码问题漏洞

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of val...