CVE-2013-5984: Microweber

Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. (dot dot) in the file parameter.

Affected products

• Microweber Microweber: up to and including 0.8

Published 2014-05-12. Last modified 2026-06-16.