Total 115 security vulnerabilities recorded for microweber software and firmware.
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19....
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19....
Open Redirect in GitHub repository microweber/microweber prior to 1.2.19....
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18....
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17....
Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, the...
Reflected XSS in GitHub repository microweber/microweber prior to 1.2.16. Executing JavaScript as the victim...
DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie......
XSS in /demo/module/?module=HERE in GitHub repository microweber/microweber prior to 1.2.15. Typical impact of XSS attacks....
Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the atta...
Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12....
The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Serv...
Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12....
The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (D...
Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in...
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12....
XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11....
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12....
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12....
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12....
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3....
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11....
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12....
Static Code Injection in GitHub repository microweber/microweber prior to 1.3....