YABB information leakage on failed login
YABB is a popular web-based bulletin board system, written in perl and available from http://www.yabbforum.com/. While evaluating it, I found a minor issue where an attacker trying to log in to the forums can extract some useful information making his job easier than it needs to be. Most YABB...