A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://packetstorm.news/files/id/176503 | Exploit VDB Entry Third Party Advisory |
| https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo | Product |
Configurations
History
22 Apr 2025, 13:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo - Product | |
| References | () https://packetstorm.news/files/id/176503 - Exploit, VDB Entry, Third Party Advisory | |
| First Time |
Phpjabbers
Phpjabbers shared Asset Booking System |
|
| CPE | cpe:2.3:a:phpjabbers:shared_asset_booking_system:1.0:*:*:*:*:*:*:* |
20 Feb 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-20 16:15
Updated : 2025-04-22 13:54
NVD link : CVE-2023-51323
Mitre link : CVE-2023-51323
JSON object : View
Products Affected
phpjabbers
- shared_asset_booking_system
CWE
No CWE.