
CVE-2023-49052
Microweber version 2.0.4 vulnerable to "Uploading Malicious Files"
exploitationmalware-analysisphishing-tools+2

Microweber version 2.0.4 vulnerable to "Uploading Malicious Files"
Harvests NetNTLM hashes in Windows domains via a local WebDAV server, with LNK file poisoning and Office document field code injection for lateral…

an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant…