GHSA-R992-XPH6-H7X2 Open redirect in microweber

microweber prior to 1.2.11 is vulnerable to open redirect...

Open redirect in microweber

microweber prior to 1.2.11 is vulnerable to open redirect...

CVE-2022-0560

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0560

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

Open redirect

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0560 Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0560 Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0560

CVE-2022-0560 describes an open redirect in microweber/microweber prior to version 1.2.11. The vulnerability arises from insufficient validation of a URL parameter, allowing an attacker to redirect users to a malicious site. Affected software: microweber/microweber (Packagist). Impact is informat...

CVE-2022-0557

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0557

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

Command injection

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0557 OS Command Injection in microweber/microweber

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0557 OS Command Injection in microweber/microweber

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0557

CVE-2022-0557 describes an OS Command Injection in the Packagist Microweber/Microweber package prior to version 1.2.11. Public advisories and exploits indicate an authenticated remote code execution path via uploaded content or crafted inputs that bypass input validation, enabling an attacker to ...

GHSA-WMJ9-XH24-J4GX Cross-site Scripting in microweber

microweber prior to version 1.2.11 is vulnerable to cross-site scripting...

Cross-site Scripting in microweber

microweber prior to version 1.2.11 is vulnerable to cross-site scripting...

Microweber 输入验证错误漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An input validation error vulnerability exists in Microweber that stems from an open...

Microweber 操作系统命令注入漏洞

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A command injection vulnerability exists in Microweber, which stems from the failure of the...

GHSA-PQCF-V8V5-JMCG Zip slip in Microweber

A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously...

Zip slip in Microweber

A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously...