1712 matches found
CVE-2023-6566
CVE-2023-6566 describes business logic errors in microweber/microweber prior to 2.0. The root cause, as reflected in multiple sources, is a flaw in the CartManager.php get function that fails to verify whether items are unpublished or deleted before checkout. Affected product: microweber/microweb...
CVE-2023-6566 Business Logic Errors in microweber/microweber
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...
PT-2023-32710 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns a missing standardized error handling mechanism in the GitHub repository microweber/microweber. Recommendations: For versions prior to 2.0, update to version 2.0 or...
Microweber Security Breach
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 2.0, which stems from th...
CVE-2023-6566: Undefined Security Weakness
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...
PT-2023-30707
Name of the Vulnerable Software and Affected Versions microweber versions 2.0.1 through 2.0.3 Description An issue in microweber allows a remote attacker to obtain sensitive information via the HTTP GET method. Approximately 955 devices are potentially affected, mainly distributed in the United...
Microweber Security Breach
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 2.0, which stems from a...
Microweber File Upload Vulnerability (CNVD-2023-9820348)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A file upload vulnerability exists in Microweber version v.2.0.4, which stems from the...
Unrestricted File Upload
microweber/microweber is vulnerable to Unrestricted File Upload. The vulnerability is due to missing validation for the files types being uploaded. This allows a remote attacker to upload files with potentially malicious content, such as JavaScript files and execute arbitrary code...
GHSA-2C7X-W3MX-H7P6 Microweber file upload vulnerability
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
Microweber file upload vulnerability
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
CVE-2023-49052
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
Unrestricted file upload
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
CVE-2023-49052
CVE-2023-49052 affects Microweber v2.0.4, where unvalidated file uploads in the created forms component allow remote code execution via a crafted script. The vulnerability arises from lack of validation for uploaded files, enabling an attacker to upload executable content and run arbitrary code. ...
CVE-2023-49052
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
CVE-2023-49052: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
CVE-2023-49052
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...
PT-2023-31039
Name of the Vulnerable Software and Affected Versions Microweber version 2.0.4 Description The issue allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component. This enables the attacker to potentially gain control over the...
Microweber 安全漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A file upload vulnerability exists in Microweber version v.2.0.4, which stems from the...
