CVE-2023-53878: Phpjabbers Member Login Script

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.

Affected products

• Phpjabbers Member Login Script: version 3.3 only

Published 2025-12-15. Last modified 2026-06-17.