Skip to main content

CVE detail

CVE-2008-1166

Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

CVSS 5.0 · Medium