← Database

CVE-2008-1166

MEDIUM CVSS: 5.0 Published: 2008-03-05 Modified: 2026-06-16

Description

Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

Affected Platforms

Flyspray Flyspray

Weakness Type

CWE-200

References