1388 matches found
CVE-2020-13405
userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...
CVE-2020-13405
userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...
Cross site request forgery (csrf)
userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...
CVE-2020-13405
userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...
CVE-2020-13405
Microweber
CVE-2020-13405: MicroWeber Unauthenticated User Database Disclosure
The post CVE-2020-13405: MicroWeber Unauthenticated User Database Disclosure appeared first on Rhino Security Labs...
Microweber Code Issue Vulnerability
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A code issue vulnerability exists in admin/view:modules/loadmodule:usersedit-user=1 in...
CVE-2020-13241
Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/loadmodule:usersedit-user=1 does not verify that the file extension used with the Add Image option on the Edit User screen corresponds to an image file...
CVE-2020-13241
Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/loadmodule:usersedit-user=1 does not verify that the file extension used with the Add Image option on the Edit User screen corresponds to an image file...
Unrestricted file upload
Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/loadmodule:usersedit-user=1 does not verify that the file extension used with the Add Image option on the Edit User screen corresponds to an image file...
CVE-2020-13241
Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/loadmodule:usersedit-user=1 does not verify that the file extension used with the Add Image option on the Edit User screen corresponds to an image file...
CVE-2020-13241
CVE-2020-13241 affects Microweber 1.1.18. The issue is an uncontrolled/unrestricted file upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the added file’s extension corresponds to an image file. This can enable upload of non-image files via the Add Image option...
CVE-2018-19917
Microweber 1.0.8 has reflected cross-site scripting XSS vulnerabilities...
CVE-2018-19917
Microweber 1.0.8 has reflected cross-site scripting XSS vulnerabilities...
Cross site scripting
Microweber 1.0.8 has reflected cross-site scripting XSS vulnerabilities...
CVE-2018-19917
CVE-2018-19917 refers to Microweber 1.0.8 with a reflected XSS in the search.php endpoint via the keywords GET parameter. Technical details from the PacketStorm/Netsparker materials show an in-page script injection vector (e.g., keywords parameter) and indicate the advisory rated it high severity...
CVE-2018-19917
Microweber 1.0.8 has reflected cross-site scripting XSS vulnerabilities...
Microweber 1.0.8 Cross-Site Scripting Vulnerability
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber version 1.0.8. A remote attack...
Microweber 1.0.8 Cross Site Scripting
Reflected Cross-site Scripting Vulnerability in Microweber 1.0.8 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Microweber Affected Software: Microweber Affected Versions: 1.0.8 Homepage: https://github.com/microweber/microweber Vulnerability:...
