CVE-2013-6043: Softaculous Webuzo

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.

Affected products

• Softaculous Webuzo: up to and including 2.1.3; version 2.1.0 only; version 2.1.1 only; version 2.1.2 only

Published 2014-12-27. Last modified 2026-06-16.