PT-2025-7304 · Phpjabbers · Phpjabbers Night Club Booking

Published 2025-02-20 · Updated 2025-02-20 · CVE-2023-51321

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPJabbers Night Club Booking Software version 1.0

Description A lack of rate limiting in the 'Forgot Password' feature allows attackers to send an excessive amount of email to a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. The Forgot Password feature is vulnerable due to the lack of rate limiting, allowing attackers to exploit this weakness.

Recommendations For PHPJabbers Night Club Booking Software version 1.0, consider implementing rate limiting in the Forgot Password feature to prevent excessive email sending. As a temporary workaround, consider disabling the Forgot Password feature until a patch is available. Restrict access to the Forgot Password functionality to minimize the risk of exploitation.

Exploit

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2023-51321

Affected Products

Phpjabbers Night Club Booking

References · 7

• 🔥 https://packetstorm.news/files/id/176502 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-51321 · Security Note
• https://osv.dev/vulnerability/CVE-2023-51321 · Vendor Advisory
• http://packetstormsecurity.com/files/176502/PHPJabbers-Night-Club-Booking-Software-1.0-Missing-Rate-Limiting.html · Note
• https://phpjabbers.com/night-club-booking-software/#sectionDemo · Note
• https://t.me/cvedetector/18572 · Telegram Post
• https://twitter.com/CVEnew/status/1892598435263738346 · Twitter Post