CVE-2018-1000826

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

CVE-2018-1000826

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

Cross site scripting

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

CVE-2018-1000826

CVE-2018-1000826 affects Microweber

CVE-2018-1000826

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

microweber.com XSS vulnerability

Open Bug Bounty ID: OBB-679811 Description| Value ---|--- Affected Website:| microweber.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross Site Request Forgery (CSRF)

microweber/microweber is susceptible to a cross-site request forgery CSRF attack. It allows the attacker to add an administrative account via the api/saveuser url by misleading an admin user to click on the malicious link...

Microweber Cross-Site Request Forgery Vulnerability

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in Microweber version 1.0.7. A remote...

CVE-2018-17104

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

Cross site request forgery (csrf)

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

CVE-2018-17104

An issue was discovered in Microweber 1.0.7. There is a CSRF attack against the admin user that can add an administrative account via api/saveuser...

CVE-2018-17104

CVE-2018-17104 affects Microweber 1.0.7, where a CSRF vulnerability in the admin flow allows an attacker to add an administrative account via the api/save_user endpoint. The issue enables CSRF against the admin user, potentially granting admin privileges without user consent; exploitation details...

microweber.com XSS vulnerability

Vulnerable URL: https://microweber.com/get-started?plan====x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 405517 VIP website status:| No Coordinat...

SQL Injection

microweber/microweber is vulnerable to SQL injection attacks. These attacks are possible through the category parameter when being used to display a category...

Microweber 1.0.3 - Arbitrary File Upload Filter Bypass PHP Remote Code Execution

Microweber 1.0.3 - Arbitrary File Upload Filter Bypass PHP Remote Code Execution Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution Vendor: Microweber Team Product web page: http://www.microweber.com Affected version: 1.0.3 Summary: Microweber is an open source drag and drop...

Microweber 1.0.3 - Persistent Cross-Site Scripting Cross-Site Request Forgery (Add Admin)

Microweber 1.0.3 - Persistent Cross-Site Scripting Cross-Site Request Forgery Add Admin Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit form action="http://localhost/micro...

Microweber 1.0.3 - Arbitrary File Upload / Filter Bypass / PHP Remote Code Execution

Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution Vendor: Microweber Team Product web page: http://www.microweber.com Affected version: 1.0.3 Summary: Microweber is an open source drag and drop PHP/Laravel CMS licensed under Apache License, Version 2.0 which allows you to...

Microweber 1.0.3 - Persistent Cross-Site Scripting / Cross-Site Request Forgery (Add Admin)

Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit input type="hidden" name="id" value="0" /...

Microweber 1.0.3 Cross Site Request Forgery / Cross Site Scripting

Microweber v1.0.3 Stored XSS And CSRF Add Admin Exploit in...

Microweber 1.0.3 Shell Upload

Microweber v1.0.3 File Upload Filter Bypass Remote PHP Code Execution Vendor: Microweber Team Product web page: http://www.microweber.com Affected version: 1.0.3 Summary: Microweber is an open source drag and drop PHP/Laravel CMS licensed under Apache License, Version 2.0 which allows you to...