(VULN) Username Login Not Case Sensitive
-
(27/01/2022) Today (10:35 am), i just found some bug or (may) vuln, this happen when i log in to my office website. Normally, i input the username same as user (lowercase) in wordpress, but in this case, in username input i involuntary log in with typo with UpperCase (Normally: ‘andy’ > POC: ‘AndY’). After i click log in button Normally this thing will failed the log in, but the wordpress still let me in with that’s typo. I dunno this is a bug, or some VULN, or a feature i never heard before.
WP.com: Unknown
Jetpack: Unknown
Correct account: UnknownThe blog I need help with is: (visible only to logged in users)
-
What site are you talking about as http://hahaha952.wordpress.com/ has never been updated since 2016.
-
- The topic ‘(VULN) Username Login Not Case Sensitive’ is closed to new replies.