Product · microweber

microweber/microweber

78 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

78 results · Feed

High 8.0

CVE-2022-0930

File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

microweber microweber/microweber microweber/microweber Packagist

Mar 12, 2022
Medium 6.8

CVE-2022-0929

XSS on dynamic_text module in microweber/microweber

XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Mar 12, 2022
High 7.1

CVE-2022-0926

File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

microweber microweber/microweber microweber/microweber Packagist

Mar 12, 2022
High 7.2

CVE-2022-0921

Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber

Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12.

microweber microweber/microweber microweber/microweber Packagist

Mar 11, 2022
Medium 6.8

CVE-2022-0928 Scanner template

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.

microweber microweber/microweber microweber/microweber Packagist

Mar 11, 2022
Medium 4.8

CVE-2022-0912

Unrestricted Upload of File with Dangerous Type in microweber/microweber

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Mar 11, 2022
Critical 9.1

CVE-2022-0913

Integer Overflow or Wraparound in microweber/microweber

Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Mar 11, 2022
Medium 4.3

CVE-2022-0906

Unrestricted file upload leads to stored XSS in microweber/microweber

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.

microweber microweber/microweber microweber/microweber Packagist

Mar 10, 2022
High 7.7

CVE-2022-0895

Static Code Injection in microweber/microweber

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Mar 10, 2022
High 7.1

CVE-2022-0896

Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Mar 9, 2022
High 7.3

CVE-2022-0777

Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Mar 1, 2022
High 8.0

CVE-2022-0723

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 26, 2022
Medium 4.3

CVE-2022-0763

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Feb 26, 2022
Medium 5.5

CVE-2022-0762

Incorrect Authorization in microweber/microweber

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Feb 26, 2022
Critical 9.1

CVE-2022-0724

Insecure Storage of Sensitive Information in microweber/microweber

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Feb 23, 2022
High 8.8

CVE-2022-0721

Insertion of Sensitive Information Into Debugging Code in microweber/microweber

Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Feb 23, 2022
High 7.6

CVE-2022-0719

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Feb 23, 2022
Critical 9.4

CVE-2022-0688

Business Logic Errors in microweber/microweber

Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 20, 2022
High 8.8

CVE-2022-0690

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 19, 2022
Medium 5.3

CVE-2022-0689

Use multiple time the one-time coupon in microweber/microweber

Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 19, 2022
Medium 6.5

CVE-2022-0678 Scanner template

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 19, 2022
High 7.6

CVE-2022-0666 Scanner template EPSS 44%

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 18, 2022
Critical 9.4

CVE-2022-0660 Scanner template

Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 18, 2022
Medium 4.3

CVE-2022-0638

Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 17, 2022
Medium 4.3

CVE-2022-0597 Scanner template

Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 15, 2022
Medium 5.4

CVE-2022-0596

Improper Validation of Specified Quantity in Input in microweber/microweber

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 15, 2022
Medium 4.3

CVE-2022-0560

Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 11, 2022
High 8.1

CVE-2022-0557 Public exploit EPSS 51%

OS Command Injection in microweber/microweber

OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 11, 2022
Critical 9.8

CVE-2022-0558

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 10, 2022
Medium 6.5

CVE-2022-0504

Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 8, 2022
Medium 5.7

CVE-2022-0505

Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 8, 2022
High 7.7

CVE-2022-0506

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 8, 2022
High 7.1

CVE-2022-0378 Scanner template

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Jan 26, 2022
High 8.1

CVE-2022-0379

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Jan 26, 2022
Medium 4.3

CVE-2022-0282

Cross-site Scripting in microweber/microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Jan 20, 2022
High 7.5

CVE-2022-0281 Scanner template EPSS 10%

Exposure of Sensitive Information to an Unauthorized Actor in microweber/microweber

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Jan 20, 2022
High 7.2

CVE-2022-0278

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Jan 20, 2022
Medium 6.5

CVE-2022-0277

Incorrect Permission Assignment for Critical Resource in microweber/microweber

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Jan 20, 2022