Email Settings Feature Vulnerability in PHPJabbers Car Park Booking System

CVE-2023-51310

Summary

The Car Park Booking System by PHPJabbers is prone to a vulnerability in its 'Forgot Password' and 'Email Settings' features. This flaw allows an attacker to exploit the absence of rate limiting, permitting them to send a significant number of emails on behalf of a legitimate user. The outcome can lead to a Denial of Service condition, overwhelming email resources and potentially disrupting normal service operations. It is crucial for affected users to implement immediate corrective measures to mitigate this risk.

References