CVE-2021-36461

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.
References
Link Resource
https://github.com/microweber/microweber/issues/751 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microweber:microweber:1.1.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-07-15 12:15

Updated : 2024-02-28 19:29


NVD link : CVE-2021-36461

Mitre link : CVE-2021-36461

CVE.ORG link : CVE-2021-36461


JSON object : View

Products Affected

microweber

  • microweber
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type