CVE-2020-13405

PoC —

CVSS 3.1

7.5 high

EPSS

14%p96

Published

Jul 16, 2020 (Jul 16, 2020)

Modified

Jun 17, 2026

Description

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.

Vendors: microweber
Products: microweber
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (13.6%)

In the news0 stories

No ingested article mentions this CVE yet.