Lucene search
+L

1398 matches found

OSV
OSV
added 2023/12/08 6:30 a.m.14 views

GHSA-P8Q6-QRGJ-7GX2 Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method

An issue present in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method...

7.5CVSS7.2AI score0.00846EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/12/08 6:30 a.m.19 views

Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method

An issue present in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method...

7.5CVSS6.5AI score0.00846EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/12/08 4:15 a.m.7 views

CVE-2023-48122

An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method...

7.5CVSS5.8AI score0.00846EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/08 4:15 a.m.17 views

Design/Logic Flaw

An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method...

5CVSS6.6AI score0.00846EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/12/08 12:30 a.m.42 views

GHSA-9R6P-HG4G-5GXP Microweber missing standardized error handling mechanism

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.0...

3.1CVSS4.2AI score0.0049EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/12/08 12:30 a.m.29 views

Microweber missing standardized error handling mechanism

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.0...

4.3CVSS6.9AI score0.0049EPSS
SaveExploits1References4Affected Software1
Prion
Prion
added 2023/12/08 12:15 a.m.26 views

Design/Logic Flaw

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...

2.1CVSS7.1AI score0.0049EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/12/08 12:0 a.m.26 views

CVE-2023-6599 Missing Standardized Error Handling Mechanism in microweber/microweber

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...

3.1CVSS5.9AI score
SaveExploits0References4
CNNVD
CNNVD
added 2023/12/08 12:0 a.m.9 views

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber version v.2.0.1. A remote attacker can...

7.5CVSS7.3AI score0.00846EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/08 12:0 a.m.71 views

CVE-2023-48122

The CVE-2023-48122 issue affects microweber v2.0.1 and is fixed in v2.0.4. It enables a remote attacker to obtain sensitive information via HTTP GET, indicating a remote information disclosure vulnerability with a CVSSv3.1 base score of 7.5 (High). Mitigation: upgrade to microweber v2.0.4 or late...

7.5CVSS7.2AI score0.00846EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2023/12/07 12:39 p.m.24 views

Business Logic Errors

microweber is vulnerable for Business Logic Errors. The vulnerability is due to the get function in CartManager.php lacking a check for whether the content items are unpublished or deleted before they are processed for checkout...

6.5CVSS7AI score0.00487EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/12/07 12:30 a.m.21 views

GHSA-3RPX-PGMF-J96H Microweber Business Logic Errors

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.0. Unpublished and deleted products can be added to checkout...

5.9CVSS6AI score0.00487EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/12/07 12:30 a.m.30 views

Microweber Business Logic Errors

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.0. Unpublished and deleted products can be added to checkout...

6.5CVSS7.1AI score0.00487EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2023/12/07 12:15 a.m.30 views

CVE-2023-6566

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

6.5CVSS0.00487EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/07 12:0 a.m.20 views

CVE-2023-6566 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

5.9CVSS6.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/12/07 12:0 a.m.41 views

CVE-2023-6566 Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...

5.9CVSS6.7AI score0.00487EPSS
SaveExploits1References2
CVE
CVE
added 2023/12/07 12:0 a.m.46 views

CVE-2023-6566

CVE-2023-6566 describes business logic errors in microweber/microweber prior to 2.0. The root cause, as reflected in multiple sources, is a flaw in the CartManager.php get function that fails to verify whether items are unpublished or deleted before checkout. Affected product: microweber/microweb...

6.5CVSS6AI score0.00487EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/12/07 12:0 a.m.11 views

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 2.0, which stems from th...

4.3CVSS4.2AI score0.0049EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/07 12:0 a.m.11 views

PT-2023-32710 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns a missing standardized error handling mechanism in the GitHub repository microweber/microweber. Recommendations: For versions prior to 2.0, update to version 2.0 or...

4.3CVSS3.9AI score0.0049EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2023/12/06 12:0 a.m.8 views

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 2.0, which stems from a...

6.5CVSS5.8AI score0.00487EPSS
SaveExploits1References2
Rows per page
Query Builder