CVE-2022-0895

HIGH Year: 2022
CVSS v3 Score
7.7
High
CVSS v2 Score
7.5
High
Weakness Type
CWE-96
View all →

Vulnerability Description

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

Related Vulnerabilities

CVE-2024-13265

HIGH
CVSS:7.5(High)

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning...

CWE-962024

CVE-2024-13267

HIGH
CVSS:7.5(High)

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno T...

CWE-962024

CVE-2021-39115

HIGH
CVSS:7.2(High)

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands v...

CWE-962021

CVE-2024-32487

HIGH
CVSS:8.6(High)

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled fi...

CWE-962024

CVE-2024-13268

MEDIUM
CVSS:6.8(Medium)

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno allows PHP Local File Inclusion.This issue affects Opigno: from 7.X-1.0 before 7...

CWE-962024

CVE-2015-2079

HIGH
CVSS:8.8(High)

Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.

CWE-962015