Lucene search
MitreCVELIST:CVE-2020-35952HistoryJan 03, 2021 - 3:49 a.m.
CVE-2020-35952
2021-01-0303:49:31
mitre
www.cve.org
4
phpfusion andromeda 9.x
login.php
unique error messages
enumeration
EPSS
0.001
Percentile
34.4%
login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password (i.e., not a single “Incorrect username or password” message in both cases), which might allow enumeration.
Related
cve
cve
CVE-2020-35952
2021-01-03 04:15:12
prion
prion
Default credentials
2021-01-03 04:15:00
nvd
nvd
CVE-2020-35952
2021-01-03 04:15:12
openvas
openvas
PHPFusion < 9.03.100 Multiple Vulnerabilities
2021-05-03 00:00:00