CVE-2017-9543
HighSummary
Versions 2.0 to 3.1 of EFS Software Easy Chat Server contain a vulnerability that allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
Risk Assessment
Attackers may gain access to user accounts, leading to potential data loss and privacy breaches.
Recommendation
It is recommended to update the Easy Chat Server to the latest version to mitigate this vulnerability.
Other vulnerabilities in EFS Software Easy Chat Server
See all- CVE-2017-9557High
Versions 2.0 to 3.1 of EFS Software Easy Chat Server contain a vulnerability that allows remote attackers to discover passwords by sending the username parameter along with an empty password parameter and reading the HTML source code of the response.
- CVE-2017-9544Critical
There is a remote stack-based buffer overflow in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. An attacker may send an overly long username string to registresult.htm, potentially allowing arbitrary code execution.
Original NVD description (English source)
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.