CVE-2013-6043
Softaculous Webuzo < 2.1.4 - Username Enumeration via Login Error Messages
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-6043. PoCs published by Mahendra.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Webuzo 2.1.3, including remote OS command injection via cookie manipulation, reflected XSS in the File Manager module, and username enumeration through differential error messages. No authentication is required for exploitation.
Description
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in Webuzo 2.1.3, including remote OS command injection via cookie manipulation, reflected XSS in the File Manager module, and username enumeration through differential error messages. No authentication is required for exploitation.