1398 matches found
CVE-2022-2368
CVE-2022-2368 affects microweber/microweber prior to 1.2.20. The issue is an authentication bypass by spoofing: the login API blocks an IP after more than 5 failed attempts, but this can be bypassed by manipulating the X-Forwarded-For header, enabling password brute-force attempts. Public sources...
CVE-2022-2368 Authentication Bypass by Spoofing in microweber/microweber
Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20...
Microweber 安全漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 1.2.20, which can be...
GHSA-GMH3-X5W7-JG5M Microweber before v1.2.20 vulnerable to cross-site scripting
Prior to Microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery CSRF, fetch contents from same-site and redirect a user...
Microweber before v1.2.20 vulnerable to cross-site scripting
Prior to Microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery CSRF, fetch contents from same-site and redirect a user...
CVE-2022-2353
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
CVE-2022-2353
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
Cross site request forgery (csrf)
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
CVE-2022-2353 Cross-Site Request Forgery (CSRF) in microweber/microweber
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
CVE-2022-2353
CVE-2022-2353 affects microweber/microweber prior to v1.2.20. The root cause is improper neutralization of input, enabling an attacker to steal tokens and perform cross-site request forgery, fetch contents from the same-site, and redirect a user. Impact is described as token theft and CSRF-relate...
Microweber 跨站请求伪造漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in Microweber versions prior to v1.2.2...
PT-2022-16055 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.2.20 Description: The issue is due to improper neutralization of input, allowing an attacker to steal tokens and perform cross-site request forgery, fetch contents from the same site, and redirect a...
CVE-2022-2353 Cross-Site Request Forgery (CSRF) in microweber/microweber
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input allowing an attacker to inject maliciously crafted script into the system via HTTP request...
GHSA-Q6MP-562X-GGVV Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...