1388 matches found
CVE-2022-0678 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0678
CVE-2022-0678 affects Microweber/Microweber prior to version 1.2.11, with a reflected XSS via the logout flow where the redirectUrl parameter can be manipulated to inject scripts. The Nuclei template confirms the vulnerability as a Cross-Site Scripting issue in microweber/microweber before 1.2.11...
GHSA-HHRJ-WP42-32V3 Generation of Error Message Containing Sensitive Information in microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
GHSA-3WWJ-WH2W-G4XP CRLF Injection in microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CRLF Injection in microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
Microweber 跨站脚本漏洞
Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a cross-site scripting vulnerability, and no details of the vulnerability are available at this...
microweber 安全漏洞
Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a security vulnerability, and no details of the vulnerability are available at this time...
microweber 跨站脚本漏洞
Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a cross-site scripting vulnerability, and no details of the vulnerability are available at this...
CVE-2022-0666
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0666
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
Crlf injection
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0666
CVE-2022-0666 affects microweber/microweber prior to 1.2.11. The vulnerability is a CRLF Injection caused by lack of filtering in redirects (notably the redirect_to/redirectUrl path), leading to stack trace exposure. Nuclei and Veracode listings corroborate the issue and note potential impact suc...
CVE-2022-0660
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0660
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
Information disclosure
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0660 Generation of Error Message Containing Sensitive Information in microweber/microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0660
Microweber before 1.2.11 is affected by an information-disclosure vulnerability in microweber/microweber. An error message generated when viewing load_module:comments#search exposes sensitive information, potentially enabling an attacker to obtain sensitive data and, per the nuclei template, poss...