Microweber vulnerable to command injection

microweber/microweber prior to 1.3.3 is vulnerable to command injection in the "first name" field. This allows for server-side template injection, which can lead to arbitrary code execution...

CVE-2023-1881

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-1877

Command Injection in GitHub repository microweber/microweber prior to 1.3.3...

Command injection

Command Injection in GitHub repository microweber/microweber prior to 1.3.3...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-1877 Command Injection in microweber/microweber

Command Injection in GitHub repository microweber/microweber prior to 1.3.3...

编号撤回

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. This CVE number has been withdrawn...

CVE-2023-1881 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-1877 Command Injection in microweber/microweber

Command Injection in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-1877

CVE-2023-1877 affects microweber/microweber prior to 1.3.3. The vulnerability is a command injection in the submission of the first name field, which can lead to server-side template injection and arbitrary code execution. Exploitation details are not provided in the connected documents beyond th...

PT-2023-17305 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.3 Description: The issue is related to command injection in the GitHub repository microweber/microweber. Specifically, the "first name" field is vulnerable, allowing for server-side template...

CVE-2023-1881

CVE-2023-1881 affects microweber/microweber before version 1.3.3. The vulnerability is a stored Cross-site Scripting (XSS) due to insufficient input sanitization, with exploitable impact via the X-Forwarded-For header in some reports. Public documents identify an in-the-wild or reported risk and ...

Microweber 命令注入漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A command injection vulnerability exists in Microweber versions prior to 1.3.3, which...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.3, which...

CVE-2023-1881 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization of user inputs in the admin settings, which allows an admin authenticated attacker to inject and execute arbitrary JavaScript into the system...

GHSA-C2RC-8M9F-G4FH Microweber Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber 1.3.2 and prior. A patch is available and anticipated to be part of version 1.3.3...

CVE-2023-1081

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-1081

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...