1388 matches found
Input validation
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0597 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0597 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0597
Microweber (packagist/microweber) vulnerability CVE-2022-0597: Open Redirect in versions prior to 1.2.11. The issue is triggered by a redirect_to parameter, enabling redirection to potentially malicious sites. Remediation: upgrade to version 1.2.11 or later. If exploits or in-the-wild details are...
Microweber command injection vulnerability
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A command injection vulnerability exists in Microweber, which stems from the failure of the...
PT-2022-13292 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.2.11 Description: The issue is related to an Open Redirect in Packagist microweber/microweber. Recommendations: For versions prior to 1.2.11, update to version 1.2.11 or later to resolve the issue...
CVE-2022-0596 Improper Validation of Specified Quantity in Input in microweber/microweber
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...
Microweber 安全漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. There is a security vulnerability in Microweber, there is no information about the...
Packagist microweber 输入验证错误漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An input validation error vulnerability exists in Packagist microweber. No information...
CVE-2022-0596
CVE-2022-0596 affects microweber/microweber prior to version 1.2.11. The vulnerability is due to improper validation of the specified quantity in input, allowing a negative product amount to be used. This could enable an attacker to manipulate the total value and, per multiple sources, obtain pro...
Open Redirect
microweber is vulnerable to open redirect. Lack of secure validation of URL allows an attacker to redirect the user to malicious URL...
OS Command Injection
microweber is vulnerable to OS command injection. The vulnerability exists due to a default fall through in a switch case for php version 6 to 12, allowing an attacker to injection maliciously crafted command via the plupload function...
microweber cross-site scripting vulnerability (CNVD-2022-12763)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in microweber, which stems from the product's...
microweber cross-site request forgery vulnerability (CNVD-2022-12800)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in microweber because the product does...
microweber has an unspecified vulnerability (CNVD-2022-12762)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A security vulnerability exists in microweber, which stems from the inclusion of sensitive...
Cross-Site Scripting (XSS)
microweber is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the input stored during tagging...
in microweber/microweber
Description Sensitive information as part of the error is getting disclosed while viewing comments from "loadmodule:commentssearch=" Proof of Concept 1. Login to https://demo.microweber.org 2. Visit https://demo.microweber.org/demo/admin/view:modules/loadmodule:commentssearch= 3. Now enter anythi...
Open Redirect in microweber/microweber
Description An Open Redirect vulnerability enables attacker to redirect the victims/users to malicious websites. The bug exists due to improper fix of https://huntr.dev/bounties/c9d586e7-0fa1-47ab-a2b3-b890e8dc9b25/. By adding an extra slash / the previous fix can be bypassed. Proof of Concept...
