1398 matches found
CVE-2022-0777
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
Default credentials
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0777
CVE-2022-0777 affects microweber/microweber prior to version 1.3. The issue is a weak password recovery mechanism caused by a missing rate limit on password reset emails, as described by the connected advisories (e.g., GHSA-7R79-MRP6-8MHQ and related Red Hat/NVD entries). The documented impact is...
CVE-2022-0777 Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
Microweber logic flaw vulnerability
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A logic flaw vulnerability exists in Microweber, which stems from an error in the business...
Microweber 授权问题漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An email bombing vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from a failure to ra...
Microweber Cross-Site Scripting Vulnerability (CNVD-2022-15527)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in GitHub, which stems from the lack of proper...
microweber cross-site scripting vulnerability (CNVD-2022-15526)
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber, which stems from the lack of prope...
Business Logic Errors
microweber/microweber is vulnerable to business logic errors. The vulnerability exists in updatecart function of CartManager.php due to missing validations which allows an attacker to exploit the flaw...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the Edit source option in the endpoint URL by navigating to the malicious URLs...
Insecure Storage of Sensitive Information
Vulnerability name: EXIF Geolocation Data Not Stripped From Uploaded Images vulnerability Description:- When the user uploads his profile picture, the uploaded image’s EXIF Geolocation Data does not get stripped. As a result, anyone can get sensitive information of microweber users like their...
GHSA-5875-P652-2PPM Exposure of Resource to Wrong Sphere in microweber
Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...
Exposure of Resource to Wrong Sphere in microweber
Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...
GHSA-4P92-FV6V-FHFJ Cross-site Scripting in microweber
Microweber prior to 1.2.11 is vulnerable to reflected cross-site scripting...
Cross-site Scripting in microweber
Microweber prior to 1.2.11 is vulnerable to reflected cross-site scripting...
Cross-site Scripting in microweber
Microweber Cross-site Scripting XSS - Stored XSS vulnerability on admin page up to version 1.3...
GHSA-6M26-25Q2-CQ46 Cross-site Scripting in microweber
Microweber Cross-site Scripting XSS - Stored XSS vulnerability on admin page up to version 1.3...
CVE-2022-0723
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...