CVE-2021-36461

EUVD-2021-23063
An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
microwebermicroweber
1.1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/microweber/microweber/issues/751
https://github.com/microweber/microweber/issues/751