Description
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
References
- http://secunia.com/secunia_research/2007-94/advisory/
- 27187 vdb-entry
- helpbox-error-information-disclosure(39544) vdb-entry
- 27699 third-party-advisory