EDB-50601

PoC

Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration

view exploit source exploit_dbtype webappsauthor Daniel Moralespublished 2021-12-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-44848USmedium5.3Exploit
In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan