GCVE - cpe:2.3:a:microweber:microweber:1.1.18:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microweber:microweber:1.1.18:*:*:*:*:*:*:*

part: a version: 1.1.18 update: *

Vendor	Microweber (`258278ac-42e3-5a44-848e-a62116cf50f6`)
Product	Microweber (`6be223c2-f9f1-5295-8b8f-5f1a82c03f9c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/microweber/microweber`	purl2cpe	2026-06-01 10:18:20.571179
`pkg:sourceforge/microweber.mirror`	purl2cpe	2026-06-01 10:18:20.571181

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-23140`	vulnerable	2026-06-08 05:22:31.788351	Details available Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active. Published: 2020-11-09T17:03:59.000Z Updated: 2024-08-04T14:58:13.891Z Open on db.gcve.eu Reference links https://gist.github.com/virendratiwari03/bddafb3cd82dde8202bd056d340d3e36	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23139`	vulnerable	2026-06-08 05:22:31.787974	Details available Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which could result in unauthorized access to system data or functionality, or a complete system compromise. Published: 2020-11-09T17:03:24.000Z Updated: 2024-08-04T14:58:13.802Z Open on db.gcve.eu Reference links https://gist.github.com/virendratiwari03/9fdebe4d0b379d1996238b535add56d6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23138`	vulnerable	2026-06-08 05:22:31.787495	Details available An unrestricted file upload vulnerability was discovered in the Microweber 1.1.18 admin account page. An attacker can upload PHP code or any extension (eg- .exe) to the web server by providing image data and the image/jpeg content type with a .php extension. Published: 2020-11-09T17:03:02.000Z Updated: 2024-08-04T14:58:14.560Z Open on db.gcve.eu Reference links https://gist.github.com/virendratiwari03/0918aaba97eba31666630996ab3aeec3 https://gist.github.com/virendratiwari03/800f96271f22c0c2f5aea126c7f1f170	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23136`	vulnerable	2026-06-08 05:22:31.786981	Details available Microweber v1.1.18 is affected by no session expiry after log-out. Published: 2020-11-09T17:02:41.000Z Updated: 2026-07-09T00:10:46.077Z Open on db.gcve.eu Reference links https://gist.github.com/virendratiwari03/0b0d161e1141fdd74122abbb02fefe17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13241`	vulnerable	2026-06-08 05:18:00.389015	Details available Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User screen) corresponds to an image file. Published: 2020-05-20T18:53:38.000Z Updated: 2024-08-04T12:11:19.445Z Open on db.gcve.eu Reference links https://gist.github.com/virendratiwari03/0af29841fdf27207eb3abc8f28d326f3	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.