CVE-2019-7550

In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued.

• CWE-209

• https://www.criticalstart.com/2019/02/information-disclosure-in-jforum-2-1-x-syntax/Exploit, Third Party Advisory
• https://www.criticalstart.com/2019/02/information-disclosure-in-jforum-2-1-x-syntax/Exploit, Third Party Advisory

Published

Feb 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7544An issue was discovered in MyWebSQL 3.7. The Add User functi…
• CVE-2019-7545In DbNinja 3.2.7, the Add Host function of the Manage Hosts …
• CVE-2019-7546An issue was discovered in SIDU 6.0. The dbs parameter of th…
• CVE-2019-7547An issue was discovered in SIDU 6.0. Because the database na…
• CVE-2019-7548SQLAlchemy 1.2.17 has SQL Injection when the group_by parame…7.8
• CVE-2019-7549An issue was discovered in GitLab Community and Enterprise E…
• CVE-2019-7551Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x …9
• CVE-2019-7552An issue was discovered in PHP Scripts Mall Investment MLM S…5.4
• CVE-2019-7553PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.…5.4
• CVE-2019-7554An issue was discovered in PHP Scripts Mall API Based Travel…
• CVE-2019-7559In btor2parser/btor2parser.c in Boolector Btor2Tools before …
• CVE-2019-7560In parser/btorsmt2.c in Boolector 3.0.0, opening a specially…