| Package | Affected versions | Patched versions |
|---|---|---|
| helpbox | = 3.7.1 |
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free