Microweber Cross-Site Request Forgery Vulnerability

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in Microweber version 1.0.7. A remote...

CVE-2018-17104

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

Cross site request forgery (csrf)

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

CVE-2018-17104

CVE-2018-17104 affects Microweber 1.0.7, where a CSRF vulnerability in the admin flow allows an attacker to add an administrative account via the api/save_user endpoint. The issue enables CSRF against the admin user, potentially granting admin privileges without user consent; exploitation details...

CVE-2018-17104

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

CVE-2018-17104: Cross-Site Request Forgery (CSRF)

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

microweber.com XSS vulnerability

Vulnerable URL: https://microweber.com/get-started?plan====x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 405517 VIP website status:| No Coordinat...

SQL Injection

microweber/microweber is vulnerable to SQL injection attacks. These attacks are possible through the category parameter when being used to display a category...

Microweber 1.0.3 - Persistent Cross-Site Scripting Cross-Site Request Forgery (Add Admin)

Microweber 1.0.3 - Persistent Cross-Site Scripting Cross-Site Request Forgery Add Admin Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit form action="http://localhost/micro...

Microweber 1.0.3 - Arbitrary File Upload Filter Bypass PHP Remote Code Execution

Microweber 1.0.3 - Arbitrary File Upload Filter Bypass PHP Remote Code Execution Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution Vendor: Microweber Team Product web page: http://www.microweber.com Affected version: 1.0.3 Summary: Microweber is an open source drag and drop...

Microweber 1.0.3 - Arbitrary File Upload / Filter Bypass / PHP Remote Code Execution

Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution Vendor: Microweber Team Product web page: http://www.microweber.com Affected version: 1.0.3 Summary: Microweber is an open source drag and drop PHP/Laravel CMS licensed under Apache License, Version 2.0 which allows you to...

Microweber 1.0.3 - Persistent Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)

Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit input type="hidden" name="id" value="0" /...

Microweber 1.0.3 Shell Upload

Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution Vendor: Microweber Team Product web page: http://www.microweber.com Affected version: 1.0.3 Summary: Microweber is an open source drag and drop PHP/Laravel CMS licensed under Apache License, Version 2.0 which allows you to...

Microweber 1.0.3 Cross Site Request Forgery / Cross Site Scripting

Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit in...

Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit

Exploit for php platform in category web applications Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit inp...

Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution

Summary Microweber is an open source drag and drop PHP/Laravel CMS licensed under Apache License, Version 2.0 which allows you to create your own website, blog or online shop. Description Microweber suffers from an authenticated arbitrary command execution vulnerability. The issue is caused due t...

Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution Vulnerability

Exploit for php platform in category web applications Vendor: Microweber Team Product web page: http://www.microweber.com Affected version: 1.0.3 Summary: Microweber is an open source drag and drop PHP/Laravel CMS licensed under Apache License, Version 2.0 which allows you to create your own...

Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit

Summary Microweber is an open source drag and drop PHP/Laravel CMS licensed under Apache License, Version 2.0 which allows you to create your own website, blog or online shop. Description The application allows users to perform certain actions via HTTP requests without performing any validity...

Microweber 0.95 - SQL Injection Vulnerability

Exploit Title: Microweber 0.95 - SQL Injection Vulnerability Vendor: https://microweber.com/ Download link: https://microweber.com/download https://github.com/microweber/microweber CVE ID: CVE-2014-9464 Vulnerability: SQL Injection Affected version: Version 0.95 before 12/09/2014. Fixed version:...

Microweber CMS 0.95 - SQL Injection

Microweber CMS 0.95 - SQL Injection Exploit Title: SQL Injection in Microweber CMS 0.95 Google Dork: N/A Date: 12/16/2014 Exploit Author: Pham Kien Cuong [email protected] and ITAS Team www.itas.vn Vendor Homepage: Microweber https://microweber.com/ Software Link:...