CVE-2011-4678

CVE-2011-4678 describes an information disclosure vulnerability in One Click Orgs versions prior to 1.2.3. The password reset function provides distinct error messages for registered versus unregistered email addresses, enabling attackers to enumerate valid user accounts. This low-severity vulnerability has a CVSS score of 5.0, indicating a network-based attack with low complexity and potential for partial confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.