Medium severity5.3NVD Advisory· Published Feb 12, 2019· Updated Jun 17, 2026
CVE-2019-7550
CVE-2019-7550
Description
In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued.
Affected products
2Patches
Vulnerability mechanics
References
1- www.criticalstart.com/2019/02/information-disclosure-in-jforum-2-1-x-syntax/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.