PT-2025-7292 · Phpjabbers · Phpjabbers Car Park Booking System
CVE-2023-51309
·
Publicado
2025-02-20
·
Atualizado
2025-06-05
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
PHPJabbers Car Park Booking System version 3.0
Description
A lack of rate limiting in the 'Email Settings' feature allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Recommendations
For PHPJabbers Car Park Booking System version 3.0, consider implementing rate limiting in the 'Email Settings' feature to prevent excessive email sending.
As a temporary workaround, restrict access to the 'Email Settings' feature until a patch is available.
Avoid using the 'Email Settings' feature for mass email sending until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Allocation of Resources Without Limits
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpjabbers Car Park Booking System