1388 matches found
CVE-2022-0504
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
Information disclosure
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0504 Generation of Error Message Containing Sensitive Information in microweber/microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0504 Generation of Error Message Containing Sensitive Information in microweber/microweber
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0504
CVE-2022-0504 affects microweber/microweber prior to 1.2.11. The issue is the generation of error messages that may contain sensitive information, leading to potential information disclosure. CVSS data in the records indicates confidentiality impact as HIGH (network exploitability, low complexity...
CVE-2022-0505 Cross-Site Request Forgery (CSRF) in microweber/microweber
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0505 Cross-Site Request Forgery (CSRF) in microweber/microweber
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0505
CVE-2022-0505 affects microweber/microweber before 1.2.11. The connected documents identify it as a Cross-Site Request Forgery (CSRF) vulnerability. The core issue is a CSRF exposure in Packagist microweber/microweber prior to 1.2.11; there are no details on the exact root cause in these sources....
CVE-2022-0506 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0506 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0506
CVE-2022-0506 is a Cross-site Scripting (XSS) vulnerability stored in the microweber/microweber package prior to version 1.2.11. The Red Hat, NVD, OSV, and CNVD records consistently describe a stored XSS flaw where user-supplied input is not properly sanitized, allowing injected script to be exec...
Microweber 跨站请求伪造漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in microweber because the product does...
microweber 安全漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A security vulnerability exists in microweber, which stems from the inclusion of sensitive...
Microweber 跨站脚本漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in microweber, which stems from the product's...
OS Command Injection in microweber/microweber
Description OS command injection also known as shell injection is a web security vulnerability that allows an attacker to execute arbitrary operating system OS commands on the server that is running an application, and typically fully compromise the application and all its data. Very often, an...
in microweber/microweber
Description In the Microweber CMS, there are two endpoints that can be used together to get local file inclusion vulnerability. 1. /api/BackupV2/upload?src=/etc/passwd 2. /api/BackupV2/download?file=passwd When logged in as administrator, we can upload any readable file from the operating system...
GHSA-PRFF-6J8Q-VRV7 Cross-site Scripting in microweber
There is a persistent XSS Vulnerability exsists in the checkout page where we can able to execute any javascription in the last name field...
Cross-site Scripting in microweber
There is a persistent XSS Vulnerability exsists in the checkout page where we can able to execute any javascription in the last name field...