.. / CVE-2020-13405

• Info Disclosure
• Nuclei
• Web

Exploit for Microweber <1.1.20 - Information Disclosure (CVE-2020-13405)

Description:

Microweber before 1.1.20 is susceptible to information disclosure via userfiles/modules/users/controller/controller.php. An attacker can disclose the users database via a /modules/ POST request and thus potentially access sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2020-13405.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-13405.yaml

References: