Denial of Service Risk in PHPJabbers Night Club Booking Software
CVE-2023-51321
6.5MEDIUM
Summary
The PHPJabbers Night Club Booking Software v1.0 is vulnerable due to the absence of rate limiting in its 'Forgot Password' feature. This flaw permits attackers to exploit the functionality by generating a vast number of e-mail requests for valid users. Such excessive emailing can overwhelm the email server, leading to potential Denial of Service (DoS) conditions that disrupt legitimate access and operational functionality.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved