Security Advisory

CVE-2020-13405

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-07-16 18:23:35
Last updated 2024-08-04 12:18:17
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.