1544 matches found
CVE-2023-49052
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
CVE-2022-0698
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
CVE-2024-41381
microweber 2.0.16 was discovered to contain a Cross Site Scripting XSS vulnerability via userfiles\modules\settings\admin.php...
CVE-2022-0689
Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0762
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0560
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0763
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0277
Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0282
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0929
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0912
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0596
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0724
Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0690
Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0968
The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request. in microweber/microweber in GitHub repository microweber/microweber prior to 1.2.12...