Microweber Cross-Site Scripting Detection

Microweber contains a reflected cross-site scripting in Packagist microweber/microweber prior to 1.2.11. !/usr/bin/env python3 -- coding: utf-8 -- """Microweber contains a reflected cross-site scripting in Packagist microweber/microweber prior to 1.""" from kittysploit import from...

Microweber < 1.2.11 - CRLF Injection Detection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. !/usr/bin/env python3 -- coding: utf-8 -- """CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.""" import r...

CVE-2022-0379

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2023-6832 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6832 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6599

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6599: Missing Standardized Error Handling Mechanism

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6566: Undefined Security Weakness

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5976

Improper Access Control in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5976

The CVE-2023-5976 entry concerns Microweber (microweber/microweber) prior to version 2.0.0 with an improper access control flaw. Multiple connected sources identify the root cause as insufficient restrictions that allow unauthorized actions (e.g., commenting on unpublished blog content). Context ...

CVE-2023-5976: Improper Access Control

Improper Access Control in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5244 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-2239: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2240

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2014

Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2368

Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20...

CVE-2022-2353: Cross-Site Request Forgery (CSRF)

Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...