CVE-2022-0698

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

Design/Logic Flaw

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber version 1.3.1, which allows an...

CVE-2022-0698

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

CVE-2022-0698

The connected documents confirm a concrete vulnerability: Microweber 1.3.1 contains an XSS on the 'select-file' parameter that allows an unauthenticated user to perform an account takeover. This is described across CVE sources (e.g., Red Hat, NVD, GHSA, Veracode) as a Cross-site Scripting issue w...

PT-2022-13369 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: Microweber version 1.3.1 Description: The issue allows an unauthenticated user to perform an account takeover via a Cross-Site Scripting XSS attack on the select-file parameter. There is a patch available in the development branch, but it has...

CVE-2022-0698

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

CVE-2022-0698: Improper Neutralization of Input During Web Page Generation

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

CVE-2022-0698

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

Host Header Injection Vulnerability in Microweber

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A host header injection vulnerability exists in Microweber v1.2.15. An attacker can explo...

GHSA-RP7F-FHM8-9HPF Account Takeover Through Password Reset Poisoning

Microweber 1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

Account Takeover Through Password Reset Poisoning

Microweber 1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

CVE-2022-33012

Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

Design/Logic Flaw

Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

CVE-2022-33012: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

Microweber 注入漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A host header injection vulnerability exists in Microweber v1.2.15. An attacker can explo...

CVE-2022-33012

Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

CVE-2022-33012

Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

CVE-2022-33012

Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack...

CVE-2022-33012

CVE-2022-33012 affects Microweber v1.2.15, where a host header injection flaw can enable an attacker to take over accounts via password-reset poisoning. The connected documents consistently reference an account takeover vulnerability in Microweber v1.2.15 stemming from host header manipulation. T...