Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
microweber microweber vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-6832
Business Logic Errors in GitHub repository microweber/microweber before 2.0.
Microweber Microweber
578
VMScore
CVE-2020-28337
A directory traversal issue in the Utils/Unzip module in Microweber up to and including 1.1.20 allows an authenticated malicious user to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administra...
Microweber Microweber
383
VMScore
CVE-2022-1439
Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber before 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press "tab" but there is probably a paylaod that ...
Microweber Microweber
383
VMScore
CVE-2022-1504
XSS in /demo/module/?module=HERE in GitHub repository microweber/microweber before 1.2.15. Typical impact of XSS attacks.
Microweber Microweber
383
VMScore
CVE-2022-1555
DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber before 1.2.16. inject arbitrary js code, deface website, steal cookie...
Microweber Microweber
383
VMScore
CVE-2022-1584
Reflected XSS in GitHub repository microweber/microweber before 1.2.16. Executing JavaScript as the victim
Microweber Microweber
802
VMScore
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber before 1.2.11.
Microweber Microweber
516
VMScore
CVE-2022-0560
Open Redirect in Packagist microweber/microweber before 1.2.11.
Microweber Microweber
356
VMScore
CVE-2022-0596
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber before 1.2.11.
Microweber Microweber
516
VMScore
CVE-2022-0597
Open Redirect in Packagist microweber/microweber before 1.2.11.
Microweber Microweber
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834
CVE-2024-30100
CVE-2024-4577
physical
dos
CVE-2024-30099
CVE-2024-27801
CVE-2024-32146
logic flaw
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »