softaculous.comConfirmation
http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched CVE-2013-6043
Webuzo 2.1.3 - Multiple Vulnerabilities
Record summary
CVE-2013-6043 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWebuzo 2.1.3 - Multiple VulnerabilitiesExploitDB exploitby MahendraNot analyzed1 file
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-6043 web.archive.org
https://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29 web.archive.org
https://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-(DS-2013-007)