What’s Vulnerable › Vulnerabilities

CVE-2023-53878: Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability

• Severity: medium (CVSS 6.9 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-15 · updated 2026-06-17
• Weakness: CWE-444

Description

Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.

Affected products

• PHP Jabbers Member Login Script: 3.3

References

• https://www.exploit-db.com/exploits/51710
• https://www.phpjabbers.com/member-login-script/
• https://www.vulncheck.com/advisories/member-login-script-client-side-request-desynchronization-vulnerability

Get alerted when CVE-2023-53878 or the next vulnerability affects your stack