Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the account name provided. This can be used by an attacker to enumerate accounts by guessing email addresses.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mellow Fish YetiShare 信息泄露漏洞
Vulnerability Description
Mellow Fish YetiShare是英国Mellow Fish公司的一套基于PHP的文件托管网站系统脚本。 Mellow Fish YetiShare 3.5.2版本至4.5.3版本中的_account_forgot_password.ajax.php文件存在安全漏洞。攻击者可通过猜测邮件地址利用该漏洞枚举用户账户。
CVSS Information
N/A
Vulnerability Type
N/A