Skip to content
OpenAdvisories

Product · PHP Jabbers

Member Login Script

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.9

    CSRF in PHP Jabbers scripts

    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading…

  • Medium 6.9

    Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability

    Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to …