1398 matches found
OS Command Injection
microweber is vulnerable to OS command injection. The vulnerability exists due to a default fall through in a switch case for php version 6 to 12, allowing an attacker to injection maliciously crafted command via the plupload function...
microweber cross-site scripting vulnerability (CNVD-2022-12763)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in microweber, which stems from the product's...
microweber has an unspecified vulnerability (CNVD-2022-12762)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A security vulnerability exists in microweber, which stems from the inclusion of sensitive...
microweber cross-site request forgery vulnerability (CNVD-2022-12800)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in microweber because the product does...
Cross-Site Scripting (XSS)
microweber is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the input stored during tagging...
in microweber/microweber
Description Sensitive information as part of the error is getting disclosed while viewing comments from "loadmodule:commentssearch=" Proof of Concept 1. Login to https://demo.microweber.org 2. Visit https://demo.microweber.org/demo/admin/view:modules/loadmodule:commentssearch= 3. Now enter anythi...
Open Redirect in microweber/microweber
Description An Open Redirect vulnerability enables attacker to redirect the victims/users to malicious websites. The bug exists due to improper fix of https://huntr.dev/bounties/c9d586e7-0fa1-47ab-a2b3-b890e8dc9b25/. By adding an extra slash / the previous fix can be bypassed. Proof of Concept...
GHSA-VM37-J55J-8655 OS Command Injection in Microweber
Microweber is a content management system with drag and drop. Prior to version 1.2.11, Microweber is vulnerable to OS Command Injection...
OS Command Injection in Microweber
Microweber is a content management system with drag and drop. Prior to version 1.2.11, Microweber is vulnerable to OS Command Injection...
Open redirect in microweber
microweber prior to 1.2.11 is vulnerable to open redirect...
GHSA-R992-XPH6-H7X2 Open redirect in microweber
microweber prior to 1.2.11 is vulnerable to open redirect...
CVE-2022-0560
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0560
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
Open redirect
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0560 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0560
CVE-2022-0560 describes an open redirect in microweber/microweber prior to version 1.2.11. The vulnerability arises from insufficient validation of a URL parameter, allowing an attacker to redirect users to a malicious site. Affected software: microweber/microweber (Packagist). Impact is informat...
CVE-2022-0560 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...