CVE-2019-19806

_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the account name provided. This can be used by an attacker to enumerate accounts by guessing email addresses.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:mfscripts:yetishare:*:*:*:*:*:*:*:*

Information

Published : 2019-12-30 10:15

Updated : 2021-07-21 04:39


NVD link : CVE-2019-19806

Mitre link : CVE-2019-19806


JSON object : View

CWE
CWE-209

Generation of Error Message Containing Sensitive Information

Advertisement

dedicated server usa

Products Affected

mfscripts

  • yetishare