CVE-2022-0921

Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber

Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0921

The CVE-2022-0921 entry concerns Microweber up to version 1.2.12 where the Backup/Restore feature can be abused to achieve Remote Code Execution. Affected software: microweber/microweber. Root cause: improper handling of backups/uploads allows an attacker to place or execute malicious PHP via the...