1388 matches found
CVE-2022-0926
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
Unrestricted file upload
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0926
The CVE-2022-0926 entry concerns Microweber (microweber/microweber). A vulnerability in the file upload filter allows bypassing input validation, leading to stored XSS. Affected version range: prior to 1.2.12. The root cause is improper validation in the file upload handling, enabling injection o...
Integer Overflow or Wraparound in Microweber
Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...
GHSA-C383-Q5VF-HX55 Integer Overflow or Wraparound in Microweber
Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...
Cross-site Scripting in microweber
Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...
GHSA-JJP3-M93H-5JM4 Cross-site Scripting in microweber
Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...
GHSA-J878-43HM-8GR5 Unrestricted Upload of File with Dangerous Type in Microweber
In Microweber prior to 1.2.12, a malicious actor may abuse the Backup/Restore feature to achieve Remote Code Execution...
Unrestricted Upload of File with Dangerous Type in Microweber
In Microweber prior to 1.2.12, a malicious actor may abuse the Backup/Restore feature to achieve Remote Code Execution...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber before 1.2.11. The vulnerability stems fro...
Microweber 跨站脚本漏洞
Microweber is a drag-and-drop website builder and CMS based on the PHP Laravel framework. Microweber suffers from a cross-site scripting vulnerability, which can be exploited by attackers to upload . azhtml file e.g. ahtml, bhtml, chtml, ddhtml, as long as it ends in html. After uploading,...
CVE-2022-0921
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921
The CVE-2022-0921 entry concerns Microweber up to version 1.2.12 where the Backup/Restore feature can be abused to achieve Remote Code Execution. Affected software: microweber/microweber. Root cause: improper handling of backups/uploads allows an attacker to place or execute malicious PHP via the...
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...