Vulnerability in Phpjabbers Member Login Script

CVE-2023-53878

Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.

Vulnerability class: HTTP Request Smuggling

EPSS: 0.003 (24.5th percentile) — read the EPSS interpretation.