Loading vulnerability details…
CVSS v3.1
N/A
EPSS
2.89%
Published
Dec 27, 2014
Modified
May 6, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.
Weaknesses (CWE)
Affected Products (4)
References (4)