Record summary

CVE-2013-6043 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.

Description

The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBWebuzo 2.1.3 - Multiple VulnerabilitiesExploitDB exploitby MahendraNot analyzed1 file

linked to 3 vulnerabilities

ExploitDB

PoC details

References

4