1404 matches found
GHSA-VCGF-VMPC-PH79 Microweber Incorrect Permission Assignment for Critical Resource vulnerability
In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...
Microweber Incorrect Permission Assignment for Critical Resource vulnerability
In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...
GHSA-P5HJ-XXFR-PWC3 Code Injection in microweber
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
Code Injection in microweber
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
HTML Injection
microweber/microweber is vulnerable to HTML injection. An attacker can inject and execute malicious html content in the webpage as the library does not properly clean the html tags before being rendered on the webpage...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability existsdue to the lack of sanitization in 'notifformentry.php', allowing an attacker to inject script into web pages and its leads to XSS attack...
Information Disclosure
microweber/microweber is vulnerable to information disclosure. The vulnerability exists due to the lack of sanitization in apiuser.php file, allowing an attacker to gain access to unauthorized sensitive information...
Access Control Bypass
microweber/microweber is vulnerable to access control bypass. The vulnerability that exists in user permissions in apiuser.php file does not perform sufficient user permissions, allowing unauthorized users to access sensitive information...
CVE-2022-0282
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0282
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
Cross site scripting
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0282 Cross-site Scripting in microweber/microweber
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0282 Cross-site Scripting in microweber/microweber
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0282
CVE-2022-0282 affects microweber/microweber prior to version 1.2.11, with a Cross-site Scripting vulnerability described as arising from inadequate filtering of externally entered data during code-segment construction. Impact as described is exploitation of XSS; no exploit details are provided in...
CVE-2022-0281
Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0281
Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...
Information disclosure
Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0281
CVE-2022-0281 affects Microweber (microweber/microweber) prior to 1.2.11, allowing exposure of sensitive information to an unauthorized actor. The Nuclei template and related sources describe an information-disclosure vulnerability with potential data exposure. Remediation is to apply the vendor ...