6.5
CVE-2023-51339
- EPSS 0.64%
- Veröffentlicht 20.02.2025 19:15:11
- Zuletzt bearbeitet 04.11.2025 19:16:21
- CVE-Watchlists
- Unerledigt
LoginA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpjabbers ≫ Event Ticketing System Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.64% | 0.467 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://www.phpjabbers.com/event-ticketing-system/#sectionDemo
https://packetstorm.news/files/id/176519
http://packetstormsecurity.com/files/176519/PHPJabbers-Event-Ticketing-System-1.0-Missing-Rate-Limiting.html