Design/Logic Flaw

An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames...