CVE-2023-51310: PHPJabbers Car Park Booking System · Unthrottled Resource Allocation
Source CVE Database V5
Not known to be exploited · CVSS 4.3 Medium.
Data as of 26 Oct 2026, 17:16 UTC
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 42% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LExploitation evidence
Disclosed: evidence found.
CVE published 20 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
To mitigate CVE-2023-51310, organizations should implement strict rate limiting on email-triggering functionalities within the PHPJabbers Car Park Booking System, particularly for 'Forgot Password' and 'Email Settings' features. This can be achieved by configuring application-level throttling to restrict the number of emails sent per user within a defined time window. Additionally, monitoring and alerting mechanisms should be established to detect unusual spikes in email activity. Employing CAPTCHA or multi-factor authentication on sensitive forms can reduce automated abuse. Organizations should also review user access controls to minimize the risk of compromised accounts being used for exploitation. If possible, updating to a patched version or applying vendor-provided fixes is recommended once available. Network-level email rate limiting and outbound email filtering can provide an additional layer of defense. Finally, educating users and administrators about this risk and encouraging prompt reporting of suspicious activity will enhance overall resilience.
Description
A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.