1712 matches found
Rate limit missing in microweber
Microweber prior to version 1.3 does not rate limit password reset emails...
CVE-2022-0777
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0777
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
Default credentials
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0777
CVE-2022-0777 affects microweber/microweber prior to version 1.3. The issue is a weak password recovery mechanism caused by a missing rate limit on password reset emails, as described by the connected advisories (e.g., GHSA-7R79-MRP6-8MHQ and related Red Hat/NVD entries). The documented impact is...
CVE-2022-0777 Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0777
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
microweber cross-site scripting vulnerability (CNVD-2022-15526)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber, which stems from the lack of prope...
Microweber logic flaw vulnerability
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A logic flaw vulnerability exists in Microweber, which stems from an error in the business...
PT-2022-13431
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.3 Description The issue concerns a weak password recovery mechanism for forgotten passwords in the microweber/microweber GitHub repository. Specifically, it does not rate limit password reset emails,...
CVE-2022-0777: Weak Password Recovery Mechanism for Forgotten Password
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
Microweber 授权问题漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An email bombing vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from a failure to ra...
Microweber Cross-Site Scripting Vulnerability (CNVD-2022-15527)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in GitHub, which stems from the lack of proper...
Business Logic Errors
microweber/microweber is vulnerable to business logic errors. The vulnerability exists in updatecart function of CartManager.php due to missing validations which allows an attacker to exploit the flaw...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the Edit source option in the endpoint URL by navigating to the malicious URLs...
Insecure Storage of Sensitive Information
Vulnerability name: EXIF Geolocation Data Not Stripped From Uploaded Images vulnerability Description:- When the user uploads his profile picture, the uploaded image’s EXIF Geolocation Data does not get stripped. As a result, anyone can get sensitive information of microweber users like their...
GHSA-5875-P652-2PPM Exposure of Resource to Wrong Sphere in microweber
Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...
Exposure of Resource to Wrong Sphere in microweber
Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...