Describe CVE-2008-1166.
What is CVE-2008-1166?
Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames..