CVEvulnerability
CVE-2021-36461
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-07-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-434
Description
An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.
Affected configurations
• microweber microweber 1.1.3
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- https://github.com/microweber/microweber/issues/751 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/microweber/microweber/issues/751 Exploit, Issue Tracking, Third Party Advisory