File and Path Handling

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File ReadCVE-2026-65694microweber · CVSS 7.5 · 3.4% likely

   CWE-22

2. Unrestricted Upload of File with Dangerous Type in microweber/microweberCVE-2022-4732microweber · CVSS 4.7 · 38% likely

   CWE-434

3. A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. T…CVE-2020-28337Microweber · 17% likely

   CWE-22

4. Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. (dot dot) in t…CVE-2013-5984Microweber · 2.8% likely

   CWE-22

5. File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.CVE-2023-49052Microweber · 2.5% likely

   CWE-434

6. Microweber CMS Authenticated Local File Inclusion via Backup APICVE-2025-34076Microweber Ltd. · CVSS 6.1 · 2.3% likely

   CWE-22

7. An unrestricted file upload vulnerability was discovered in the Microweber 1.1.18 admin account page. An attacker can upload PHP code or any extension (eg- .exe) to the web server…CVE-2020-23138Microweber · 1.3% likely

   CWE-434

8. An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious co…CVE-2021-36461Microweber · 0.9% likely

   CWE-434

9. File upload filter bypass leading to stored XSS in microweber/microweberCVE-2022-0930microweber · CVSS 8 · 0.9% likely

   CWE-434

10. Unrestricted Upload of File with Dangerous Type in microweber/microweberCVE-2022-0912microweber · CVSS 4.8 · 0.5% likely

    CWE-434

11. Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option…CVE-2020-13241Microweber · 0.5% likely

    CWE-434

12. Multiple vulnerabilities in the Microweber administration panelCVE-2026-5695Microweber · CVSS 8.4 · 0.4% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.