userSpice Username Enumeration Vulnerability

A username enumeration vulnerability exists in userSpice version 4.3.24. This vulnerability allows unauthenticated attackers to identify valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. The response text can be analyzed for the 'taken' string, indicating the presence of an account associated with the submitted username.

Impact

Exploitation of this vulnerability allows for username enumeration, enabling attackers to discover valid usernames within the application.

Reproduction

To reproduce this vulnerability, send a POST request to the existingUsernameCheck.php endpoint with a username payload. Analyze the response for the 'taken' string, which indicates that the username exists in the system.