An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini.
cpe:2.3:a:microweber:microweber:1.1.3:*:*:*:*:*:*:*
26B5B517-157A-416A-8816-98EAC6FBA01B
OR
[microweber Background file upload getshell.pdf](https://github.com/microweber/microweber/files/6719464/microweber.Background.file.upload.getshell.pdf)

This pdf file describes the vulnerability in detail

microweber1.1.3 has background upload getshell
This is a GitHub Issue
repo:microweber
owner:microweber
Title : microweber1.1.3 has background upload getshell
Issue date:

--- start body ---
[microweber Background file upload getshell.pdf](https://github.com/microweber/microweber/files/6719464/microweber.Background.file.upload.getshell.pdf)

This pdf file describes the vulnerability in detail

--- end body ---

comments :
--- start comments ---

--- end comments ---