microweber CVE-2022-0930 跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-0930
• https://github.com/advisories/GHSA-2cv6-6437-39p2
• https://cve.circl.lu/cve/CVE-2022-0930
• https://www.miggo.io/vulnerability-database/cve/CVE-2022-0930
• https://strobes.co/vi/cve/CVE-2022-0930/
• https://cve.imfht.com/detail/CVE-2022-0930
• https://www.cnvd.org.cn/flaw/show/CNVD-2022-20688
• https://cve.akaoma.com/cve-2022-0930
• https://github.com/trickest/cve/blob/main/2022/CVE-2022-0930.md

Related Vulnerabilities

• MicroweberCMS userfiles x存在路径穿越漏洞(CVE-2026-65694)
• PoCCVE-2026-65694: Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read
• PoCCVE-2020-13405: Microweber <1.1.20 - Information Disclosure
• PoCCVE-2022-0281: Microweber Information Disclosure
• PoCCVE-2022-0378: Microweber Cross-Site Scripting
• PoCCVE-2022-0597: Microweber < 1.2.11 - Open Redirection
• PoCCVE-2022-0660: Microweber <1.2.11 - Information Disclosure
• PoCCVE-2022-0666: Microweber < 1.2.11 - CRLF Injection
• PoCCVE-2022-0678: Microweber <1.2.11 - Cross-Site Scripting
• PoCCVE-2022-0928: Microweber < 1.2.12 - Stored Cross-Site Scripting
• PoCCVE-2022-0954: Microweber <1.2.11 - Stored Cross-Site Scripting
• PoCCVE-2022-0963: Microweber <1.2.12 - Stored Cross-Site Scripting
• PoCCVE-2022-0968: Microweber <1.2.12 - Integer Overflow