1398 matches found
CVE-2022-0557
CVE-2022-0557 describes an OS Command Injection in the Packagist Microweber/Microweber package prior to version 1.2.11. Public advisories and exploits indicate an authenticated remote code execution path via uploaded content or crafted inputs that bypass input validation, enabling an attacker to ...
CVE-2022-0557 OS Command Injection in microweber/microweber
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557 OS Command Injection in microweber/microweber
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
Cross-site Scripting in microweber
microweber prior to version 1.2.11 is vulnerable to cross-site scripting...
GHSA-WMJ9-XH24-J4GX Cross-site Scripting in microweber
microweber prior to version 1.2.11 is vulnerable to cross-site scripting...
Microweber 输入验证错误漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An input validation error vulnerability exists in Microweber that stems from an open...
Microweber 操作系统命令注入漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A command injection vulnerability exists in Microweber, which stems from the failure of the...
Zip slip in Microweber
A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously...
GHSA-PQCF-V8V5-JMCG Zip slip in Microweber
A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously...
CVE-2022-0558
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0558
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0558
CVE-2022-0558 affects microweber/microweber before 1.2.11. The issue is a stored cross-site scripting (XSS) vulnerability caused by lack of input sanitization, with exploitation occurring via stored data (e.g., tagging). Impact is elevated to client-side script execution within affected webpages....
CVE-2022-0558 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
Packagist microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Packagist microweber, which stems from a...
Information Disclosure
microweber is vulnerable to information disclosure. The vulnerability exists due to the lack of sanitization of the error message via the json.data...
Cross-Site Scripting (XSS)
microweber is vulnerable to cross site scripting. The vulnerability exists due to a lack of santization via the URL schemes, allowing an attacker to execute arbitrary JavaScript in a victim's browser...
Cross-Site Request Forgery (CSRF)
microweber/microweber is vulnerable to cross-site request forgeryCSRF. The vulnerability exists due to a lack of input sanitization in the api.php file allowing the attacker to manipulate authorized users to initiate unwanted actions...