Skip to content
OpenAdvisories
Unscored CVE-2021-36461 EUVD-2021-23063GHSA-f987-r737-hx6g

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section…

Published Jul 15, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.

References