CVE-2023-53878 — Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability
Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header pars…
Published: 2025-12-15 · CVSS: 6.9 · CVSS 4.0
Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7