Vulnerability · Published Dec 15, 2025 · Assigned by VulnCheck
CVE-2023-53878Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability
Medium 6.9
In plain English
A medium-severity security flaw in Member Login Script from Phpjabbers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.4%top 69.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Phpjabbers | Member Login Script | 3.3 |
Weakness: CWE-444 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
References
- ExploitDB-51710 exploit
- Product Webpage product
- VulnCheck Advisory: Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability third-party-advisory