Description
login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- 19488 third-party-advisory
- ADV-2006-1244 vdb-entry
- 24388 vdb-entry
- interact-login-error-info-disclosure(25651) vdb-entry