Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber version v.2.0.1. A remote attacker can...

CVE-2023-48122

The CVE-2023-48122 issue affects microweber v2.0.1 and is fixed in v2.0.4. It enables a remote attacker to obtain sensitive information via HTTP GET, indicating a remote information disclosure vulnerability with a CVSSv3.1 base score of 7.5 (High). Mitigation: upgrade to microweber v2.0.4 or late...

Business Logic Errors

microweber is vulnerable for Business Logic Errors. The vulnerability is due to the get function in CartManager.php lacking a check for whether the content items are unpublished or deleted before they are processed for checkout...

GHSA-3RPX-PGMF-J96H Microweber Business Logic Errors

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.0. Unpublished and deleted products can be added to checkout...

Microweber Business Logic Errors

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.0. Unpublished and deleted products can be added to checkout...

CVE-2023-6566

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6566 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-6566

CVE-2023-6566 describes business logic errors in microweber/microweber prior to 2.0. The root cause, as reflected in multiple sources, is a flaw in the CartManager.php get function that fails to verify whether items are unpublished or deleted before checkout. Affected product: microweber/microweb...

CVE-2023-6566 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 2.0, which stems from th...

PT-2023-32710 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns a missing standardized error handling mechanism in the GitHub repository microweber/microweber. Recommendations: For versions prior to 2.0, update to version 2.0 or...

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 2.0, which stems from a...

Microweber File Upload Vulnerability (CNVD-2023-9820348)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A file upload vulnerability exists in Microweber version v.2.0.4, which stems from the...

Unrestricted File Upload

microweber/microweber is vulnerable to Unrestricted File Upload. The vulnerability is due to missing validation for the files types being uploaded. This allows a remote attacker to upload files with potentially malicious content, such as JavaScript files and execute arbitrary code...

Microweber file upload vulnerability

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

GHSA-2C7X-W3MX-H7P6 Microweber file upload vulnerability

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

CVE-2023-49052

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

Unrestricted file upload

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

CVE-2023-49052

CVE-2023-49052 affects Microweber v2.0.4, where unvalidated file uploads in the created forms component allow remote code execution via a crafted script. The vulnerability arises from lack of validation for uploaded files, enabling an attacker to upload executable content and run arbitrary code. ...

Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A file upload vulnerability exists in Microweber version v.2.0.4, which stems from the...