Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2023-49052
Good to know:
Date: November 29, 2023
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.
Language: PHP
Severity Score
Related Resources (5)
Severity Score
Weakness Type (CWE)
Unrestricted Upload of File with Dangerous Type
CWE-434Top Fix
Upgrade Version
Upgrade to version microweber/microweber - dev-1.0.4-ml;microweber/microweber - 1.2.17.x-dev;microweber/microweber - 1.3.2.x-dev;microweber/microweber - 1.2.9.x-dev;microweber/microweber - 1.2.12.x-dev;microweber/microweber - 1.2.11.x-dev;microweber/microweber - 1.2.16.x-dev;microweber/microweber - dev-1.2-dev;microweber/microweber - 1.2.19.x-dev;microweber/microweber - dev-1.3-dev;microweber/microweber - 1.2.18.x-dev;microweber/microweber - 2.0.4.x-dev;microweber/microweber - 2.0.5.x-dev;microweber/microweber - 1.2.20.x-dev;microweber/microweber - microweber-0.750;microweber/microweber - 1.2.8.x-dev;microweber/microweber - 1.2.15.x-dev;microweber/microweber - 1.2.2.x-dev;microweber/microweber - 1.2.10.x-dev;microweber/microweber - 1.2.7.x-dev;microweber/microweber - 1.2.13.x-dev;microweber/microweber - 1.3.1.x-dev;microweber/microweber - 1.3.3.x-dev;microweber/microweber - 2.0.1.x-dev;microweber/microweber - 1.2.21.x-dev;microweber/microweber - 1.3.4.x-dev;microweber/microweber - 1.2.4.x-dev;microweber/microweber - dev-Radanovn-patch-1;microweber/microweber - 1.2.6.x-dev;microweber/microweber - 1.2.14.x-dev;microweber/microweber - dev-1.2-test-pm;microweber/microweber - 1.3.5.x-dev;microweber/microweber - 1.2.5.x-dev
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | REQUIRED |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | HIGH |
| Integrity (I): | HIGH |
| Availability (A): | HIGH |