What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-13405.

What is the severity rating of CVE-2020-13405?

CVE-2020-13405 has a severity rating of 7.5 (high).

How can I fix CVE-2020-13405?

To fix CVE-2020-13405, update to version 1.1.20 of Microweber.

Where can I find more information about CVE-2020-13405?

More information about CVE-2020-13405 can be found at the following links: [link1](https://nvd.nist.gov/vuln/detail/CVE-2020-13405), [link2](https://github.com/microweber/microweber/commit/269320e0e0e06a1785e1a1556da769a34280b7e6), [link3](https://rhinosecuritylabs.com/research/microweber-database-disclosure/).

Vulnerability/
CVE-2020-13405

high

7.5

CWE

200 306

16/7/2020

24/5/2022

4/8/2024

CVE-2020-13405: Infoleak

Q: How does CVE-2020-13405 impact Microweber before version 1.1.20?

CVE-2020-13405 allows an unauthenticated user to disclose the users database via a `/modules/ POST` request in Microweber before version 1.1.20.

First published: Thu Jul 16 2020(Updated: )

`userfiles/modules/users/controller/controller.php` in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a `/modules/ POST` request.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
composer/microweber/microweber	<1.1.20	1.1.20
Microweber WHMCS	<1.1.20

Remedy

https://github.com/microweber/microweber/commit/269320e0e0e06a1785e1a1556da769a34280b7e6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-13405.
What is the severity rating of CVE-2020-13405?
CVE-2020-13405 has a severity rating of 7.5 (high).
How does CVE-2020-13405 impact Microweber before version 1.1.20?
CVE-2020-13405 allows an unauthenticated user to disclose the users database via a `/modules/ POST` request in Microweber before version 1.1.20.
How can I fix CVE-2020-13405?
To fix CVE-2020-13405, update to version 1.1.20 of Microweber.
Where can I find more information about CVE-2020-13405?
More information about CVE-2020-13405 can be found at the following links: [link1](https://nvd.nist.gov/vuln/detail/CVE-2020-13405), [link2](https://github.com/microweber/microweber/commit/269320e0e0e06a1785e1a1556da769a34280b7e6), [link3](https://rhinosecuritylabs.com/research/microweber-database-disclosure/).

collector/github-advisory-latest
alias/GHSA-pmxg-w9c7-ffmq
alias/CVE-2020-13405
collector/github-advisory
agent/references
agent/type
collector/mitre-cve
source/MITRE
agent/remedy
agent/weakness
agent/last-modified-date
agent/severity
agent/description
agent/event
agent/first-publish-date
agent/trending
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-cve
agent/author
agent/softwarecombine
package-manager/composer
vendor/microweber
canonical/microweber whmcs

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.