Lucene search
K

PHPJabbers Restaurant Booking System 3.0 Missing Rate Limiting

🗓️ 11 Jan 2024 00:00:00Reported by Rahad Chowdhury, BugsBD LimitedType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 373 Views

PHPJabbers Restaurant Booking System v3.0 No Rate Limit. Vulnerable to Rate Limiting & potential unauthorized access. Test on Windows 10, 11, Linux

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2023-51314
20 Feb 202517:20
circl
CNNVD
PHPJabbers Restaurant Booking System Security Vulnerability
11 Jan 202400:00
cnnvd
CVE
CVE-2023-51314
20 Feb 202500:00
cve
Cvelist
CVE-2023-51314
20 Feb 202500:00
cvelist
EUVD
EUVD-2023-56035
3 Oct 202520:07
euvd
NVD
CVE-2023-51314
20 Feb 202515:15
nvd
RedhatCVE
CVE-2023-51314
22 Feb 202500:36
redhatcve
Vulnrichment
CVE-2023-51314
20 Feb 202500:00
vulnrichment
`# Exploit Title: PHPJabbers Restaurant Booking System v3.0 - No Rate Limit  
# Date: 19/12/2023  
# Exploit Author: BugsBD Limited  
# Discover by: Rahad Chowdhury  
# Vendor Homepage: https://www.phpjabbers.com/  
# Software Link:  
https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo  
# Version: v3.0  
# Tested on: Windows 10, Windows 11, Linux  
# CVE-2023-51314  
  
Descriptions:  
PHPJabbers Restaurant Booking System v3.0 is vulnerable to Rate  
limiting. Rate limiting is implemented in web applications and APIs to  
prevent abuse, such as brute-force attacks or excessive requests that  
could lead to resource exhaustion. When a rate limit is bypassed or  
not properly enforced, it opens the door for attackers to carry out  
malicious activities more quickly than intended, potentially leading  
to unauthorized access, data breaches, or service disruption.  
  
Steps to Reproduce:  
  
1. Login to your dashboard.  
2. Goto System Options Menu then open the Email Settings section.  
3. Now use any email and name in the Email address and Name field.  
4. Check your email.  
  
## Reproduce:  
[href](https://github.com/bugsbd/CVE/tree/main/2023/CVE-2023-51314)  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Jan 2024 00:00Current
7.4High risk
Vulners AI Score7.4
EPSS0.00233
373