1547 matches found
CVE-2022-0558: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
Information Disclosure
microweber is vulnerable to information disclosure. The vulnerability exists due to the lack of sanitization of the error message via the json.data...
Cross-Site Scripting (XSS)
microweber is vulnerable to cross site scripting. The vulnerability exists due to a lack of santization via the URL schemes, allowing an attacker to execute arbitrary JavaScript in a victim's browser...
Cross-Site Request Forgery (CSRF)
microweber/microweber is vulnerable to cross-site request forgeryCSRF. The vulnerability exists due to a lack of input sanitization in the api.php file allowing the attacker to manipulate authorized users to initiate unwanted actions...
Cross-Site Request Forgery in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site request forgery...
GHSA-7X2H-3V2V-24P9 Cross-Site Request Forgery in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site request forgery...
Cross-site Scripting in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site scripting...
GHSA-XXQ4-3742-3H28 Generation of Error Message Containing Sensitive Information in microweber
microweber version 1.2.10 and prior may generate an error message containing sensitive information...
Generation of Error Message Containing Sensitive Information in microweber
microweber version 1.2.10 and prior may generate an error message containing sensitive information...
GHSA-JJVM-3MFQ-7GC7 Cross-site Scripting in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site scripting...
CVE-2022-0505
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0504
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0505
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0504
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0506
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0506
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
Information disclosure
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0504 Generation of Error Message Containing Sensitive Information in microweber/microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...