VULNERABILITY INTELLIGENCE

CVE-2021-36461

CVSS score8.8 HIGH

EPSS probability0.94%

CISA KEVNot currently listed

Published2022-07-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.

Weakness classification

CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references

cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory