.. / CVE-2022-0660

• Info Disclosure
• Nuclei
• Web

Exploit for Microweber <1.2.11 - Information Disclosure (CVE-2022-0660)

Description:

Microweber before 1.2.11 is susceptible to information disclosure. An error message is generated in microweber/microweber which contains sensitive information while viewing comments from load_module:comments#search=. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2022-0660.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0660.yaml

References: