Browse CVEs

MEDIUM 6.1 CVE-2022-0698 Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. Microweber No fix yet Fix from $1,6002022-11-25 HIGH 8.8 CVE-2022-33012 Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. Microweber No fix yet Fix from $1,9502022-11-22 MEDIUM 6.1 CVE-2022-3245 HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, inject… Microweber 1.3.2+ Fix from $1,6002022-09-20 MEDIUM 6.1 CVE-2022-3242 Code Injection in GitHub repository microweber/microweber prior to 1.3.2. Microweber 1.3.2+ Fix from $1,6002022-09-20 MEDIUM 5.4 CVE-2022-2777 Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.1. Microweber 1.3.1+ Fix from $1,6002022-08-11 MEDIUM 6.1 CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21. Microweber 1.2.21+ Fix from $1,6002022-07-22 HIGH 8.8 CVE-2021-36461 An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by upload… Microweber No fix yet Fix from $1,9502022-07-15 CRITICAL 9.8 CVE-2022-2368 Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20. Microweber 1.2.20+ Fix from $2,3002022-07-11 MEDIUM 6.1 CVE-2022-2353 Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, … Microweber 1.2.20+ Fix from $1,6002022-07-09 MEDIUM 5.4 CVE-2022-2300 Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19. Microweber 1.2.19+ Fix from $1,6002022-07-04 MEDIUM 5.4 CVE-2022-2280 Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19. Microweber 1.2.19+ Fix from $1,6002022-07-01 MEDIUM 6.1 CVE-2022-2252 Open Redirect in GitHub repository microweber/microweber prior to 1.2.19. Microweber 1.2.19+ Fix from $1,6002022-06-29 MEDIUM 6.1 CVE-2022-2174 Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18. Microweber 1.2.18+ Fix from $1,6002022-06-22 MEDIUM 6.1 CVE-2022-2130 Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17. Microweber 1.2.17+ Fix from $1,6002022-06-20 HIGH 8.8 CVE-2022-1631EPSS 9% Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, th… Microweber 1.2.15+ Fix from $1,9502022-05-09 MEDIUM 6.1 CVE-2022-1584 Reflected XSS in GitHub repository microweber/microweber prior to 1.2.16. Executing JavaScript as the victim Microweber 1.2.16+ Fix from $1,6002022-05-04 MEDIUM 6.1 CVE-2022-1555 DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie... Microweber 1.2.16+ Fix from $1,6002022-05-04 MEDIUM 6.1 CVE-2022-1504 XSS in /demo/module/?module=HERE in GitHub repository microweber/microweber prior to 1.2.15. Typical impact of XSS attacks. Microweber 1.2.15+ Fix from $1,6002022-04-27 MEDIUM 6.1 CVE-2022-1439 Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the att… Microweber 1.2.15+ Fix from $1,6002022-04-22 HIGH 7.5 CVE-2022-1036 Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12. Microweber 1.2.12+ Fix from $1,9502022-03-22 MEDIUM 5.5 CVE-2022-0968 The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Ser… Microweber 1.2.12+ Fix from $1,6002022-03-15 MEDIUM 5.4 CVE-2022-0963 Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12. Microweber 1.2.12+ Fix from $1,6002022-03-15 MEDIUM 5.5 CVE-2022-0961 The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (… Microweber 1.2.12+ Fix from $1,6002022-03-15 MEDIUM 5.4 CVE-2022-0954 Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods i… Microweber 1.2.11+ Fix from $1,6002022-03-15 MEDIUM 6.1 CVE-2022-0929 XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11. Microweber 1.2.11+ Fix from $1,6002022-03-12 MEDIUM 6.7 CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12. Microweber 1.2.12+ Fix from $1,6002022-03-11 MEDIUM 5.4 CVE-2022-0928 Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12. Microweber after 1.2.11 Fix from $1,6002022-03-11 HIGH 7.5 CVE-2022-0913 Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3. Microweber after 1.2.11 Fix from $1,9502022-03-11 CRITICAL 9.8 CVE-2022-0895 Static Code Injection in GitHub repository microweber/microweber prior to 1.3. Microweber 1.3+ Fix from $2,3002022-03-10 HIGH 8.8 CVE-2022-0896 Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3. Microweber 1.3+ Fix from $1,9502022-03-09