Lucene search
+L

1459 matches found

CNVD
CNVD
•added 2023/10/07 12:00 a.m.•52 views

Microweber cross-site scripting vulnerability (CNVD-2023-79685)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 2.0, which...

6.1CVSS6AI score0.01061EPSS
SaveExploits0References1
Veracode
Veracode
•added 2023/10/04 8:49 p.m.•24 views

Hard Coded Credentials

Microweber is vulnerable to the use of Hard Coded Credentials. The vulnerability is due to the hard coding of oauth access token values in the twitterfeedperformapirequest function in userfiles/modules/twitterfeed/functions.php which is required to access twitter API's. This may lead to sensitive...

7.5CVSS6.6AI score0.00541EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/09/30 3:31 a.m.•38 views

GHSA-R657-3WQH-G2X9 Microweber uses hard coded credentials

Use of Hard-coded Credentials in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of version 2.0...

5.8CVSS6.5AI score0.00541EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/09/30 3:31 a.m.•25 views

Microweber uses hard coded credentials

Use of Hard-coded Credentials in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of version 2.0...

7.5CVSS7AI score0.00541EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/09/30 1:15 a.m.•44 views

CVE-2023-5318

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...

7.5CVSS6.3AI score0.00541EPSS
SaveExploits0References2
Prion
Prion
•added 2023/09/30 1:15 a.m.•23 views

Hardcoded credentials

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...

5CVSS6AI score0.00541EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/09/30 12:00 a.m.•139 views

CVE-2023-5318

CVE-2023-5318 affects microweber/microweber prior to version 2.0, where hard-coded credentials are used in the repository. The issue originates from hard-coded credentials and is addressed by upgrading to version 2.0 or later (a patch is available/anticipated in 2.0). Impact details are stated in...

7.5CVSS6.5AI score0.00541EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/30 12:00 a.m.•11 views

CVE-2023-5318 Use of Hard-coded Credentials in microweber/microweber

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...

5.8CVSS6.8AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/30 12:00 a.m.•0 views

CVE-2023-5318: Use of Hard-coded Credentials

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...

7.5CVSS6.6AI score0.00541EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/09/30 12:00 a.m.•12 views

Microweber Trust Management Issues Vulnerabilities

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A vulnerability with trust management issues exists in Microweber versions prior to 2.0,...

7.5CVSS6.9AI score0.00541EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/09/29 12:00 a.m.•14 views

PT-2023-32038 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns the use of hard-coded credentials in the GitHub repository microweber/microweber. A patch is available and is anticipated to be part of version 2.0. Recommendations:...

7.5CVSS5.8AI score0.00541EPSS
SaveExploits0References9
OSV
OSV
•added 2023/09/28 3:30 a.m.•24 views

GHSA-RGF9-J7GV-RQ22 Microweber Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of the 2.x branch...

6.1CVSS5.4AI score0.01061EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/09/28 3:30 a.m.•30 views

Microweber Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of the 2.x branch...

6.1CVSS6.2AI score0.01061EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/09/28 1:15 a.m.•32 views

CVE-2023-5244

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 2.0...

6.1CVSS5.5AI score0.01061EPSS
SaveExploits0References2
OSV
OSV
•added 2023/09/28 12:00 a.m.•27 views

CVE-2023-5244 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 2.0...

5CVSS5.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/09/28 12:00 a.m.•15 views

CVE-2023-5244 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 2.0...

5CVSS6AI score0.01061EPSS
SaveExploits0References2
CVE
CVE
•added 2023/09/28 12:00 a.m.•114 views

CVE-2023-5244

Microweber

6.1CVSS5.4AI score0.01061EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/28 12:00 a.m.•0 views

CVE-2023-5244: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 2.0...

6.1CVSS5.9AI score0.01061EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/27 12:00 a.m.•15 views

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 2.0, which...

6.1CVSS6.1AI score0.01061EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/09/27 12:00 a.m.•11 views

PT-2023-31971 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue is a Cross-site Scripting XSS - Reflected vulnerability in the GitHub repository microweber/microweber. This type of vulnerability allows an attacker to inject malicious scrip...

6.1CVSS5AI score0.01061EPSS
SaveExploits0References11
Rows per page
Query Builder