1712 matches found
Microweber 跨站脚本漏洞
Microweber is a drag-and-drop website builder and CMS based on the PHP Laravel framework. Microweber suffers from a cross-site scripting vulnerability, which can be exploited by attackers to upload . azhtml file e.g. ahtml, bhtml, chtml, ddhtml, as long as it ends in html. After uploading,...
CVE-2022-0930: Unrestricted Upload of File with Dangerous Type
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0929: Improper Neutralization of Input During Web Page Generation
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
PT-2022-13533
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue is related to a Cross-Site Scripting XSS flaw in the dynamic text module of the microweber/microweber GitHub repository. Recommendations For versions prior to 1.2.11, update ...
PT-2022-13531
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.12 Description The issue is related to a file upload filter bypass, which can lead to stored XSS. This affects the microweber/microweber GitHub repository. Recommendations For versions prior to 1.2.1...
CVE-2022-0921
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921
The CVE-2022-0921 entry concerns Microweber up to version 1.2.12 where the Backup/Restore feature can be abused to achieve Remote Code Execution. Affected software: microweber/microweber. Root cause: improper handling of backups/uploads allows an attacker to place or execute malicious PHP via the...
CVE-2022-0921
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928
Microweber
CVE-2022-0928
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0928 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
