CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

• CWE-203

• http://secunia.com/advisories/15268Broken Link
• http://www.securityfocus.com/bid/13597Broken Link, Third Party Advisory, VDB Entry
• http://secunia.com/advisories/15268Broken Link
• http://www.securityfocus.com/bid/13597Broken Link, Third Party Advisory, VDB Entry

Published

May 18, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1644Cross-site scripting (XSS) vulnerability in guestbook.php fo…
• CVE-2005-1645Keyvan1 ImageGallery stores the image.mdb database under the…
• CVE-2005-1646The default installation of Fastream NETFile FTP/Web Server …
• CVE-2005-1647Gurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat data…
• CVE-2005-1648Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat …
• CVE-2005-1649The IPv6 support in Windows XP SP2, 2003 Server SP1, and Lon…
• CVE-2005-1651Directory traversal vulnerability in message.htm for Woppowa…
• CVE-2005-1652message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) all…
• CVE-2005-1653Cross-site scripting (XSS) vulnerability in message.htm for …
• CVE-2005-1654Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote …
• CVE-2005-1655AOL Instant Messenger 5.5.x and earlier allows remote attack…
• CVE-2005-1656Mercur Messaging 2005 SP2 allows remote attackers to read th…