1711 matches found
Microweber 跨站脚本漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber, which stems from the lack of prope...
PT-2022-13389
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which are then executed by the user's browser. No...
CVE-2022-0723: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...
Microweber跨站脚本漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in GitHub, which stems from the lack of proper...
CVE-2022-0763: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...
microweber 安全漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A logic flaw vulnerability exists in Microweber, which stems from an error in the business...
PT-2022-13419
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.3 Description The issue is related to a Cross-site Scripting XSS - Stored vulnerability. It affects the admin page of the microweber/microweber GitHub repository. Recommendations For versions prior to...
CVE-2022-0762: Incorrect Authorization
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...
Metasploit Weekly Wrap-Up
Exchange RCE Exchange remote code execution vulnerabilities are always valuable exploits to have. This week Metasploit added an exploit for an authenticated RCE in Microsoft Exchange servers 2016 and server 2019 identified as CVE-2021-42321. The flaw leveraged by the exploit exists in a...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists in admin page due to the lack of input sanitization in the createmediadir function in the MediaManager.php file allowing an attacker to inject and execute malicious javascript...
Microweber Information Disclosure Vulnerability (CNVD-2022-71439)
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An information disclosure vulnerability exists in versions of Microweber prior to 1.3, which stems from the fact that when...
Information Disclosure
microweber is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization in the plupload.php file allowing a remote attacker to view sensitive informations...
Information Disclosure
microweber is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization in the Handler.php file allow to view sensitive information in debug mode...
Insertion of Sensitive Information Into Debugging Code in Microweber
Microweber prior to 1.3 may expose sensitive information about a server and a user when running the server in debug mode...
GHSA-MJVC-J6RV-9XJ8 Insertion of Sensitive Information Into Debugging Code in Microweber
Microweber prior to 1.3 may expose sensitive information about a server and a user when running the server in debug mode...
GHSA-J8CX-J9J2-F29W Insecure Storage of Sensitive Information in Microweber
Microweber prior to version 1.3 does not strip images of EXIF data, exposing information about users' locations, device hardware, and device software...
Insecure Storage of Sensitive Information in Microweber
Microweber prior to version 1.3 does not strip images of EXIF data, exposing information about users' locations, device hardware, and device software...
Cross-site Scripting in Microweber
Microweber prior to version 1.3 is vulnerable to reflected cross-site scripting...
