CVE-2008-1166
Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
Published: 2008-03-05 · CVSS: Unscored
Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7