Microweber vulnerabilities
87 CVEs and advisories name Microweber as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-2470Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-2495Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-2368Authentication Bypass by Spoofing in microweber/microweber
- CVE-2022-2353Cross-Site Request Forgery (CSRF) in microweber/microweber
- CVE-2022-2300Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-2280Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-2252Open Redirect in microweber/microweber
- CVE-2022-2174Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-2130Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-1631Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber
- CVE-2022-1584Reflected XSS in microweber/microweber
- CVE-2022-1555DOM XSS in microweber ver 1.2.15 in microweber/microweber
- CVE-2022-1504XSS in /demo/module/?module=HERE in microweber/microweber
- CVE-2022-1439Reflected XSS on demo.microweber.org/demo/module/ in microweber/microweber
- CVE-2022-1036Able to create an account with long password leads to memory corruption / Integer Overflow in microweber/microweber
- CVE-2022-0968The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber
- CVE-2022-0963Unrestricted XML Files Leads to Stored XSS in microweber/microweber
- CVE-2022-0961The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber
- CVE-2022-0954Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber
- CVE-2022-0930File upload filter bypass leading to stored XSS in microweber/microweber
- CVE-2022-0929XSS on dynamic_text module in microweber/microweber
- CVE-2022-0926File upload filter bypass leading to stored XSS in microweber/microweber
- CVE-2022-0921Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
- CVE-2022-0928Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-0912Unrestricted Upload of File with Dangerous Type in microweber/microweber
- CVE-2022-0913Integer Overflow or Wraparound in microweber/microweber
- CVE-2022-0906Unrestricted file upload leads to stored XSS in microweber/microweber
- CVE-2022-0895Static Code Injection in microweber/microweber
- CVE-2022-0896Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber
- CVE-2022-0777Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber