Usernames Exposed! UJCMS 9.6.3 Vulnerability Unleashes Chaos
An IDOR vulnerability in UJCMS 9.6.3 lets unauthenticated users play detective with usernames via the user id parameter. It’s like a treasure hunt for identities, minus the map and pirate hat. Watch out, admin, they’re coming for your secret stash of usernames!
Hot Take:
Oh, UJCMS, you naughty platform! You’ve been caught in the act of letting strangers peek through your keyhole and see who’s home. It’s like leaving your house keys under the welcome mat and hoping nobody notices. Spoiler: they noticed.
Key Points:
- UJCMS 9.6.3 has an IDOR vulnerability allowing username enumeration.
- The exploit involves manipulating the user ID parameter in the URL.
- Usernames of existing accounts can be systematically discovered.
- The vulnerability has been tested on Linux systems.
- This exploit is publicly documented under CVE-2024-12483.
Already a member? Log in here