Skip to content
OpenAdvisories

Vendor

microweber

87 known vulnerabilities.

Products

microweber/microweber 78 microweber 6 Administration panel 2 CMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-34076 Public exploit

    Microweber CMS Authenticated Local File Inclusion via Backup API

    An authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse of the backup management API. Authenticated users can abuse the /api/BackupV2/upload and /api/BackupV2/download endpoints to read arbitrary files fr…

    microweber CMS microweber/microweber Packagist
  • Medium 6.8
    CVE-2022-1631 Public exploit

    Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber

    Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s E…

    microweber microweber/microweber microweber/microweber Packagist