Security Advisory
CVE-2023-53878
N/A
UNKNOWN
Vulnerability Description
Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP request handling by exploiting Content-Length header parsing. Attackers can send crafted POST requests with smuggled secondary requests to potentially bypass server-side request processing controls.
Published Date
December 15, 2025
Official Source
NIST NVD Advisory