IDCVSSSummaryLast (major) updatePublished
CVE-2018-1000826 4.3
Microweber version <= 1.0.7 contains a Cross Site Scripting (XSS) vulnerability in Admin login form template that can result in Execution of JavaScript code.
20-12-2018 - 10:29 20-12-2018 - 10:29
CVE-2018-17104 6.8
An issue was discovered in Microweber 1.0.7. There is a CSRF attack (against the admin user) that can add an administrative account via api/save_user.
16-09-2018 - 17:29 16-09-2018 - 17:29
CVE-2014-9464 7.5
SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL commands via the category parameter when displaying a category, related to the $parent_id variable.
05-01-2015 - 13:31 03-01-2015 - 17:59
CVE-2013-5984 6.4
Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. (dot dot) in the file parameter.
13-05-2014 - 09:21 12-05-2014 - 10:55
Back to Top Mark selected
Back to Top