Information Disclosure

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete lin…CVE-2019-20060Mfscripts · 1.4% likely

   CWE-922

2. _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the account name provided. Th…CVE-2019-19806Mfscripts · 1.0% likely

   CWE-209

3. _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different amount of time to return depending on whether an email address is configured for the…CVE-2019-19805Mfscripts · 1.0% likely

   CWE-203

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.