1712 matches found
Microweber 代码问题漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of val...
PT-2022-13527
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.12 Description The issue allows a malicious actor to achieve Remote Code Execution by abusing the Backup/Restore feature. Recommendations For versions prior to 1.2.12, update to version 1.2.12 or lat...
PT-2022-13521
Name of the Vulnerable Software and Affected Versions Microweber versions prior to 1.3 Description The issue is related to an Integer Overflow or Wraparound in the Microweber GitHub repository. Recommendations For versions prior to 1.3, update to version 1.3 or later to resolve the issue...
CVE-2022-0928: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906
CVE-2022-0906 concerns Microweber (GitHub microweber/microweber). The connected sources indicate an unrestricted file upload that can lead to a stored cross-site scripting (XSS) vulnerability in versions prior to 1.1.12. The issue is reported across multiple feeds (NVD, Red Hat, OSV, CNVD, CVE li...
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0895
CVE-2022-0895 affects microweber/microweber before version 1.3. Root cause described as static code injection from externally entered data in code snippets, potentially allowing modification of execution flow. Impact is rated HIGH/CRITICAL in sources, with network attack vector and no user intera...
CVE-2022-0895 Static Code Injection in microweber/microweber
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0895 Static Code Injection in microweber/microweber
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
PT-2022-13509 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3 Description: The issue concerns static code injection in the microweber/microweber GitHub repository. Microweber is a content management system CMS that features drag and drop functionality...
PT-2022-13518
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.1.12 Description The issue is related to unrestricted file upload, which leads to stored cross-site scripting XSS. This means an attacker could potentially upload malicious files to the server, which...
CVE-2022-0906: Improper Neutralization of Input During Web Page Generation
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...