PT-2020-13522

Name of the Vulnerable Software and Affected Versions Microweber versions prior to 1.1.20 Description The issue allows an unauthenticated user to disclose the users database via a "/modules/ POST" request. This is possible due to a flaw in the userfiles/modules/users/controller/controller.php fil...