CVE-2019-7550 | BDVDB-2026-112749 Detail

Description#

In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-02-12Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.