CVE-2021-36461

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading…

published July 15, 2022

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00942 · 60.6th percentile
Published
2022-07-15T11:34Z
EPSS history
Timeline
  • 15 JUL 11:34Z
    An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading…
    cvelistv5