Command Injection

microweber/microweber is vulnerable to Command Injection. The vulnerability exists due to improper input sanitization in XSS.php which allows an attacker to inject and execute arbitrary commands through the name field...

Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of user-input sanitization in the X-Forwarded-For header, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

Microweber Information Disclosure Vulnerability (CNVD-2023-32768)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A security vulnerability exists in Microweber versions prior to 1.3.4, which stems from...

Microweber Information Disclosure Vulnerability (CNVD-2023-32763)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An information disclosure vulnerability exists in Microweber versions prior to 1.3.4,...

Information exposure in microweber

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2239

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...

Code injection

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...

GHSA-R6XQ-XCXC-FGHX Improper Privilege Management in microweber

Microweber prior to 1.3.4 has an Improper Privilege Management vulnerability...

Improper Privilege Management in microweber

Microweber prior to 1.3.4 has an Improper Privilege Management vulnerability...

CVE-2023-2240

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

Input validation

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A security vulnerability exists in Microweber versions prior to 1.3.4, which stems from...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2239

CVE-2023-2239 concerns an information disclosure in the Microweber project microweber/microweber prior to version 1.3.4, enabling exposure of private personal information to unauthorized actors. The issue is documented across multiple sources (including CNVD/OSV and vendor advisories) and is asso...

CVE-2023-2240

CVE-2023-2240 affects Microweber/microweber prior to version 1.3.4. The root cause is improper privilege management, leading to high-severity impact across confidentiality, integrity, and availability (per CVSS 3.1/3.0 data: HIGH). No exploit details are provided in the supplied documents. The vu...

Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An information disclosure vulnerability exists in Microweber versions prior to 1.3.4,...

PT-2023-18482 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.4 Description: The issue involves exposure of private personal information to an unauthorized actor. This occurs in the GitHub repository microweber/microweber. Recommendations: For versions prior t...

PT-2023-18483 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber versions prior to 1.3.4 Description: The issue concerns Improper Privilege Management in the microweber repository. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

GHSA-F4G6-C47X-QHWW Microweber vulnerable to cross-site scripting (XSS)

microweber/microweber prior to 1.3.3 is vulnerable to cross-site scripting XSS in the template selection while changing a group template...