CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0928 – Cross-site Scripting (XSS) - Stored in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0928
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en el repositorio de GitHub microweber/microweber versiones anteriores a 1.2.12 • https://github.com/microweber/microweber/commit/fc9137c031f7edec5f50d73b300919fb519c924a https://huntr.dev/bounties/085aafdd-ba50-44c7-9650-fa573da29bcd • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0912 – Unrestricted Upload of File with Dangerous Type in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0912
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11. Una Carga no Restringida de un Archivo de Tipo Peligroso en el repositorio de GitHub microweber/microweber versiones anteriores a 1.2.11 • https://github.com/microweber/microweber/commit/24245297231f5dc88bb3a2b20d0e4e25b0ebc789 https://huntr.dev/bounties/ae5bb359-7e53-498b-848e-540c05b44c54 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0913 – Integer Overflow or Wraparound in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0913
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3. Un Desbordamiento de Enteros o Wraparound en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3 • https://github.com/microweber/microweber/commit/7559e141d0707f8eeff2f9aeaa5a0ca2e3fe6583 https://huntr.dev/bounties/f5f3e468-663b-4df0-8340-a2d77e4cc75f • CWE-190: Integer Overflow or Wraparound •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0906 – Unrestricted file upload leads to stored XSS in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12. Una subida de archivos sin restricciones conlleva a un ataque de tipo XSS almacenado en el repositorio de GitHub microweber/microweber versiones anteriores a 1.1.12 • https://github.com/microweber/microweber/commit/d9bae9df873c2d2a13a2eb08d512019d49ebca68 https://huntr.dev/bounties/87ed3b42-9824-49b0-91a5-fd908a0601e8 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0895 – Static Code Injection in microweber/microweber
https://notcve.org/view.php?id=CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3. Una Inyección de Código Estático en el repositorio de GitHub microweber/microweber versiones anteriores a 1.3 • https://github.com/microweber/microweber/commit/b2baab6e582b2efe63788d367a2bb61a2fa26470 https://huntr.dev/bounties/3c070828-fd00-476c-be33-9c877172363d • CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') •