CVE-2020-35952

Published: 2021-01-03T04:15Z

Last Modified: 2024-11-21T05:28Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password (i.e., not a single "Incorrect username or password" message in both cases), which might allow enumeration. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt