CVE-2022-0557

OS Command Injection in microweber/microweber

CVSS 8.1 HIGHEPSS 51.2%CWE-78

OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

Affected products

microweber · microweber/microweber

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/166077/Microweber-1.2.11-Shell-Upload.htmlunverified cve_referencewww.exploit-db.com/exploits/50768unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/166077/Microweber-1.2.11-Shell-Upload.html https://github.com/microweber/microweber/commit/0a7e5f1d81de884861ca677ee1aaac31f188d632 https://huntr.dev/bounties/660c89af-2de5-41bc-aada-9e4e78142db8 https://www.exploit-db.com/exploits/50768