CVE-2021-36461

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.
References
Link Resource
https://github.com/microweber/microweber/issues/751 Exploit Issue Tracking Third Party Advisory
https://github.com/microweber/microweber/issues/751 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microweber:microweber:1.1.3:*:*:*:*:*:*:*

History

21 Nov 2024, 06:13

Type Values Removed Values Added
References () https://github.com/microweber/microweber/issues/751 - Exploit, Issue Tracking, Third Party Advisory () https://github.com/microweber/microweber/issues/751 - Exploit, Issue Tracking, Third Party Advisory

Information

Published : 2022-07-15 12:15

Updated : 2024-11-21 06:13


NVD link : CVE-2021-36461

Mitre link : CVE-2021-36461

CVE.ORG link : CVE-2021-36461


JSON object : View

Products Affected

microweber

  • microweber
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type