1712 matches found
CVE-2022-0912
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0912 Unrestricted Upload of File with Dangerous Type in microweber/microweber
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0913 Integer Overflow or Wraparound in microweber/microweber
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
Cross-site Scripting (XSS)
microweber/microweber, is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of input sanitization in the file upload in the Files.php file allowing an attacker to bypass the system...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. An attacker is able to input malicious HTML tags in certain user input fields which will be executed on the client browser...
GHSA-HF4Q-52X6-4P57 Unrestricted file upload leads to stored cross-site scripting in Microweber
Microweber prior to version 1.2.12 allows unrestricted file upload, which could lead to stored cross-site scripting...
Unrestricted file upload leads to stored cross-site scripting in Microweber
Microweber prior to version 1.2.12 allows unrestricted file upload, which could lead to stored cross-site scripting...
Static Code Injection in Microweber
Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection...
GHSA-X28W-HVWC-MP75 Static Code Injection in Microweber
Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection...
Microweber Cross-Site Scripting Vulnerability (CNVD-2022-18522)
Microweber is a drag-and-drop website builder and CMS based on the PHP Laravel framework.Microweber suffers from a cross-site scripting vulnerability that could be exploited by attackers to steal user information and phishing...
PT-2022-13532
Name of the Vulnerable Software and Affected Versions microweber versions prior to 1.2.12 Description The issue is related to Cross-site Scripting XSS - Stored, which was discovered in the microweber drag and drop website builder and CMS with e-commerce. There is no known workaround for this issu...
Microweber cross-site scripting vulnerability (CNVD-2022-20098)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber before 1.3, which stems from t...
PT-2022-13527
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.12 Description The issue allows a malicious actor to achieve Remote Code Execution by abusing the Backup/Restore feature. Recommendations For versions prior to 1.2.12, update to version 1.2.12 or lat...
Microweber 代码问题漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A remote code execution vulnerability exists in versions of microweber prior to 1.2.12, which...
Microweber 跨站脚本漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber 1.2.11 and earlier versions, which stems from a lack of filterin...
Microweber 输入验证错误漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An integer overflow vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from the fact tha...
Microweber 代码问题漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of val...
PT-2022-13520
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue is related to the unrestricted upload of files with dangerous types in the GitHub repository microweber/microweber. Recommendations For versions prior to 1.2.11, update to...
