Lucene search
+L

1388 matches found

Github Security Blog
Github Security Blog
added 2022/02/18 12:0 a.m.27 views

Cross-Site Request Forgery microweber

microweber prior to version 1.2.11 is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5.1AI score0.00363EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/02/18 12:0 a.m.7 views

microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in microweber, which is caused by the generation of erro...

9.4CVSS8AI score0.06923EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/02/18 12:0 a.m.9 views

Microweber 注入漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. Microweber suffers from an injection vulnerability that originates due to a lack of...

7.6CVSS7.3AI score0.44259EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/02/17 5:15 p.m.10 views

CVE-2022-0638

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

4.3CVSS5.4AI score0.00363EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/17 5:15 p.m.24 views

CVE-2022-0638

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

4.3CVSS0.00363EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/17 5:15 p.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

4.3CVSS4.6AI score0.00363EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/02/17 4:30 p.m.35 views

CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

4.3CVSS5AI score0.00363EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/17 4:30 p.m.20 views

CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

4.3CVSS4.8AI score0.00363EPSS
SaveExploits0References4
CVE
CVE
added 2022/02/17 4:30 p.m.128 views

CVE-2022-0638

CVE-2022-0638: Cross-Site Request Forgery in microweber/microweber prior to 1.2.11. Multiple sources confirm a CSRF vulnerability in microweber versions before 1.2.11. Reported impact includes the ability for an attacker to cause user logout via forged requests (per Huntr details; other entries d...

4.3CVSS4.5AI score0.00363EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/02/17 12:0 a.m.7 views

Microweber 跨站请求伪造漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in versions of microweber prior to...

4.3CVSS5AI score0.00363EPSS
SaveExploits0References3
Veracode
Veracode
added 2022/02/16 11:15 a.m.22 views

Open Redirect

microweber is vulnerable to open redirect. An attacker is able to avert a user to a malicious website via an extra slash '/' through the logout function in the UserManager...

6.1CVSS3.8AI score0.03019EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/16 12:1 a.m.49 views

GHSA-VPQ7-M4QM-P2GP Microweber vulnerable to Improper Validation of Specified Quantity in Input

Microweber prior to version 1.2.11 can have a negative product amount. This could allow an attacker to manipulate the total value and get products for free...

4.3CVSS4.4AI score0.0062EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/16 12:1 a.m.32 views

GHSA-RW98-5846-PQHX Open redirect in microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS6.1AI score0.03019EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/02/16 12:1 a.m.26 views

Open redirect in microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS2.8AI score0.03019EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/02/16 12:1 a.m.38 views

Microweber vulnerable to Improper Validation of Specified Quantity in Input

Microweber prior to version 1.2.11 can have a negative product amount. This could allow an attacker to manipulate the total value and get products for free...

5.4CVSS5AI score0.0062EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/15 2:15 p.m.7 views

CVE-2022-0597

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS5.5AI score0.03019EPSS
SaveExploits1References4
NVD
NVD
added 2022/02/15 2:15 p.m.29 views

CVE-2022-0596

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...

5.4CVSS0.0062EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/15 2:15 p.m.6 views

CVE-2022-0596

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...

5.4CVSS5.7AI score0.0062EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/15 2:15 p.m.30 views

CVE-2022-0597

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

6.1CVSS0.03019EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/15 2:15 p.m.14 views

Open redirect

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

5.8CVSS6.1AI score0.03019EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder