CVE-2020-13405(microweber / microweber)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.

microweber CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

microweber

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

microweber

Products

microweber

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

Ordu noble@NobleOrdu13h
Building and testing a local Proof of Concept (PoC) for CVE-2020-13405 (MicroWeber CMS vulnerability). Hosted the exploit page locally, intercepted the endpoint request using Burp Suite Repeater, and triggered the payload to analyze the server response. #infosec #pentest https://t.co/hP8d7Co6lN
000109
263 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microweber	microweber	-	-	-

Explore more

Back to dashboard microweber CVEs microweber vulnerabilities