A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://packetstorm.news/files/id/176486 | Exploit VDB Entry Third Party Advisory |
| https://www.phpjabbers.com/hotel-booking-system/#sectionDemo | Product |
Configurations
History
24 Apr 2025, 15:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:phpjabbers:hotel_booking_system:4.0:*:*:*:*:*:*:* | |
| References | () https://packetstorm.news/files/id/176486 - Exploit, VDB Entry, Third Party Advisory | |
| References | () https://www.phpjabbers.com/hotel-booking-system/#sectionDemo - Product | |
| First Time |
Phpjabbers hotel Booking System
Phpjabbers |
19 Feb 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-19 21:15
Updated : 2025-04-24 15:01
NVD link : CVE-2023-51301
Mitre link : CVE-2023-51301
JSON object : View
Products Affected
phpjabbers
- hotel_booking_system
CWE
No CWE.