Skip to content
OpenAdvisories

Package · Packagist

microweber/microweber

106 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2023-49052 Public exploit

    Microweber file upload vulnerability

    File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.

    microweber/microweber Packagist
  • High 8.1
    CVE-2022-0557 Public exploit EPSS 51%

    OS Command Injection in microweber/microweber

    OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

    microweber microweber/microweber microweber/microweber Packagist
  • High 7.2
    CVE-2020-28337 Public exploit EPSS 17%

    Zip slip in Microweber

    A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an adminis…

    microweber/microweber Packagist
  • High 7.5
    CVE-2020-13405 Public exploit Scanner template EPSS 14%

    Microweber Discloses Sensitive Information

    userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.

    microweber/microweber Packagist