GCVE - cpe:2.3:a:miniweb_http_server_project:miniweb_http

Approved changes feed: RSS · Atom

cpe:2.3:a:miniweb_http_server_project:miniweb_http_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Miniweb Http Server Project (`449360d0-b445-5397-9e49-9f84d834a88f`)
Product	Miniweb Http Server (`ef9dbe4f-86f4-5d0c-bc4b-484848af8ae9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/avih/miniweb`	purl2cpe	2026-06-01 10:16:12.039942
`pkg:sourceforge/miniweb`	purl2cpe	2026-06-01 10:16:12.039945

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-10047`	vulnerable	2026-06-08 05:03:51.908533	MiniWeb <= Build 300 Arbitrary File Upload An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystem. By abusing the upload handler and crafting a traversal path, an attacker can place a malicious .exe in system32, followed by a .mof file in the WMI directory. This triggers execution of the payload with SYSTEM privileges via the Windows Management Instrumentation service. The exploit is only viable on Windows versions prior to Vista. Published: 2025-08-01T20:45:12.385Z Updated: 2026-05-15T11:14:12.945Z Open on db.gcve.eu Reference links https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/miniweb_upload_wbem.rb https://www.exploit-db.com/exploits/27607 https://sourceforge.net/projects/miniweb/ https://www.vulncheck.com/advisories/miniweb-arbitrary-file-upload	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.