New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

后台登录页面存在用户名枚举漏洞 #47

Closed

Fpointzero opened this issue Jul 31, 2024 · 0 comments

Fpointzero commented Jul 31, 2024

1.登录admin账号，增加一个用户名为test的用户。
2.使用test账号加错误密码进行登录会出现“账号或者密码错误”

3.使用不存在的账号（这里使用test1），则会出现“用户不存在或被禁用”

Fpointzero closed this as completed

Fpointzero reopened this

caiweiming added a commit that referenced this issue


          修复后台登录页面的用户名枚举漏洞 #47

4f4dfa1

Fpointzero closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment