Description
Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phpjabbers | Member Login Script | 3.3 | — |
References
- ExploitDB-51710 exploit
- Product Webpage product
- VulnCheck Advisory: Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability third-party-advisory