| عنوان | mtons https://gitee.com/mtons/mblog <=3.5.0 Usename Enumeration & Batch Account Registration |
|---|
| الوصف | The /register endpoint is used for user account registration, has no CAPTCHA protection, no rate limiting, and error messages show whether the username exists, leading to the ability to brute force usernames or perform batch account registration. |
|---|
| المصدر | ⚠️ https://gitee.com/mtons/mblog/issues/ICPMJO |
|---|
| المستخدم | ZAST.AI (UID 87884) |
|---|
| ارسال | 05/08/2025 09:14 AM (9 أشهر منذ) |
|---|
| الاعتدال | 13/08/2025 09:22 PM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 320034 [mtons mblog حتى 3.5.0 /register الكشف عن المعلومات] |
|---|
| النقاط | 16 |
|---|