critical9.8
CVE-2023-40760
User enumeration is found in PHP Jabbers Hotel Booking System v4.0.
Impact
User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpjabbers | Hotel Booking System | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
- https://www.phpjabbers.com/hotel-booking-system/
- https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
- https://www.phpjabbers.com/hotel-booking-system/