1712 matches found
PT-2022-27783 · Microweber · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue is related to Cross-site Scripting XSS - Reflected, which occurs when an application includes user input in its responses without proper validation, allowing an attacker to...
CVE-2022-4617 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2022-4617
CVE-2022-4617 is a reflected XSS vulnerability in microweber/microweber prior to version 1.3.2. Root cause indicated across connected documents is input reflected in responses (e.g., POST parameter namespaceMD5 per CNNVD). Affected versions are microweber/microweber
CVE-2022-4617: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3.2...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in select-file parameter which allows a remote attacker to inject and execute malicious JavaScript into the system...
Packagist Microweber Arbitrary File Upload (CVE-2022-0557)
An arbitrary file upload vulnerability exists in Packagist Microweber. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microweber vulnerable to cross-site scripting (XSS)
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. There was a patch released in the development branch but is not yet committed to the main branch...
GHSA-79GX-3FM8-QXQQ Microweber vulnerable to cross-site scripting (XSS)
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. There was a patch released in the development branch but is not yet committed to the main branch...
CVE-2022-0698
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
Design/Logic Flaw
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber version 1.3.1, which allows an...
CVE-2022-0698
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
CVE-2022-0698
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
CVE-2022-0698
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
CVE-2022-0698
The connected documents confirm a concrete vulnerability: Microweber 1.3.1 contains an XSS on the 'select-file' parameter that allows an unauthenticated user to perform an account takeover. This is described across CVE sources (e.g., Red Hat, NVD, GHSA, Veracode) as a Cross-site Scripting issue w...
CVE-2022-0698
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
CVE-2022-0698: Improper Neutralization of Input During Web Page Generation
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...
PT-2022-13369 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: Microweber version 1.3.1 Description: The issue allows an unauthenticated user to perform an account takeover via a Cross-Site Scripting XSS attack on the select-file parameter. There is a patch available in the development branch, but it has...
Host Header Injection Vulnerability in Microweber
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A host header injection vulnerability exists in Microweber v1.2.15. An attacker can explo...