cve/2020/CVE-2020-13405.md

CVE-2020-13405

Description

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/H4cksploit/CVEs-master
• https://github.com/RhinoSecurityLabs/CVEs
• https://github.com/alphaSeclab/sec-daily-2020
• https://github.com/merlinepedra/RHINOECURITY-CVEs
• https://github.com/merlinepedra25/RHINOSECURITY-CVEs
• https://github.com/mrnazu/CVE-2020-13405
• https://github.com/sunzu94/AWS-CVEs