186 matches found
Microweber 跨站脚本漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber 1.2.11 and earlier versions, which stems from a lack of filterin...
CVE-2022-0688
Business Logic Errors in Packagist microweber/microweber prior to 1.2.11...
GHSA-3P9J-442X-HJP7 Business Logic Errors in microweber
microweber prior to 1.2.11 allows multiple uses of a single-use coupon...
Cross-site Scripting in microweber
microweber prior to version 1.2.11 is vulnerable to cross-site scripting...
GHSA-RGP5-M2PQ-3FMG Cross-site Scripting in microweber
microweber prior to version 1.2.11 is vulnerable to cross-site scripting...
CVE-2022-0690
Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...
CRLF Injection in microweber
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...
GHSA-GHWW-CV4V-HMXX Cross-Site Request Forgery microweber
microweber prior to version 1.2.11 is vulnerable to Cross-Site Request Forgery CSRF...
Microweber 注入漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. Microweber suffers from an injection vulnerability that originates due to a lack of...
CVE-2022-0638
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
Microweber 跨站请求伪造漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site request forgery vulnerability exists in versions of microweber prior to...
CVE-2022-0597 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0596 Improper Validation of Specified Quantity in Input in microweber/microweber
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...
PT-2022-13292 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.2.11 Description: The issue is related to an Open Redirect in Packagist microweber/microweber. Recommendations: For versions prior to 1.2.11, update to version 1.2.11 or later to resolve the issue...
CVE-2022-0560
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
Microweber 输入验证错误漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An input validation error vulnerability exists in Microweber that stems from an open...
CVE-2022-0505
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...