VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,878 vulnerabilities · 1,766 actively exploited (CISA KEV)

microweber/microweber ✕Clear filters

106 results

ID	Severity	Summary	Published
CVE-2020-28337	高危7.2	A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously constructed ZIP file with	15/02/2021
CVE-2020-23136	中危5.5	Microweber v1.1.18 is affected by no session expiry after log-out.	09/11/2020
CVE-2020-13405	高危7.5	userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.	16/07/2020
CVE-2020-13241