Lucene search
Veracode Vulnerability DatabaseVERACODE:40287HistoryApr 26, 2023 - 6:02 a.m.
Command Injection
2023-04-2606:02:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
command injection
microweber
input sanitization
0.002 Low
EPSS
Percentile
51.5%
microweber/microweber is vulnerable to Command Injection. The vulnerability exists due to improper input sanitization in XSS.php which allows an attacker to inject and execute arbitrary commands through the name field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microweber/microweber | le | 1.3.3.x-dev | |
| microweber/microweber | le | 1.3.3.x-dev |
Related
huntr
huntr
RCE by Server Side Template Injection
2023-02-09 23:29:31
prion
prion
Command injection
2023-04-05 17:15:00
cve
cve
CVE-2023-1877
2023-04-05 17:15:06
osv
osv
CVE-2023-1877
2023-04-05 17:15:06
Microweber vulnerable to command injection
2023-04-05 18:30:18
cvelist
cvelist
CVE-2023-1877 Command Injection in microweber/microweber
2023-04-05 00:00:00
github
github
Microweber vulnerable to command injection
2023-04-05 18:30:18
nvd
nvd
CVE-2023-1877
2023-04-05 17:15:06