Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2023-53878

Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability

Description

Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phpjabbers Member Login Script

  • 3.3affected

References