(CVE-2022-0954) Microweber 权限控制不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-0954
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0954.yaml
• https://cve.imfht.com/detail/CVE-2022-0954?lang=en
• https://access.redhat.com/security/cve/cve-2022-0954
• https://strobes.co/vi/cve/CVE-2022-0954/
• http://vulert.com/vuln-db/CVE-2022-0954
• https://huntr.com/bounties/b99517c0-37fc-4efa-ab1a-3591da7f4d26
• https://github.com/advisories/GHSA-9cmm-52cv-6hvc

Related Vulnerabilities

• MicroweberCMS userfiles x存在路径穿越漏洞(CVE-2026-65694)
• PoCCVE-2026-65694: Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read
• PoCCVE-2020-13405: Microweber <1.1.20 - Information Disclosure
• PoCCVE-2022-0281: Microweber Information Disclosure
• PoCCVE-2022-0378: Microweber Cross-Site Scripting
• PoCCVE-2022-0597: Microweber < 1.2.11 - Open Redirection
• PoCCVE-2022-0660: Microweber <1.2.11 - Information Disclosure
• PoCCVE-2022-0666: Microweber < 1.2.11 - CRLF Injection
• PoCCVE-2022-0678: Microweber <1.2.11 - Cross-Site Scripting
• PoCCVE-2022-0928: Microweber < 1.2.12 - Stored Cross-Site Scripting
• PoCCVE-2022-0954: Microweber <1.2.11 - Stored Cross-Site Scripting
• PoCCVE-2022-0963: Microweber <1.2.12 - Stored Cross-Site Scripting
• PoCCVE-2022-0968: Microweber <1.2.12 - Integer Overflow