PT-2021-10630

Name of the Vulnerable Software and Affected Versions: Xiuno BBS version 4.0.4 Description: An issue in the component routeuser.php of Xiuno BBS allows attackers to enumerate usernames. Recommendations: For Xiuno BBS version 4.0.4, consider restricting access to the routeuser.php component to...

Xiuno BBS Access Control Vulnerability

Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from an Access Control Error vulnerability that stems from the product routeuser.php that allows retrieval of usernames. No details of the vulnerability are provided at this time...