PHP-Fusion Vulnerability - CVE-2020-35952 - Vulnerability Database

PHP-Fusion Vulnerability - CVE-2020-35952

Medium

Reference: CVE-2020-35952

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-35952

Title: PHP-Fusion Vulnerability

Overview:

login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password (i.e. not a single quotIncorrect username or passwordquot message in both cases) which might allow enumeration.