EFS Software Easy Chat Server vulnerabilities
3 known CVE vulnerabilities in EFS Software Easy Chat Server, translated and rated.
- CVE-2017-9557High
Versions 2.0 to 3.1 of EFS Software Easy Chat Server contain a vulnerability that allows remote attackers to discover passwords by sending the username parameter along with an empty password parameter and reading the HTML source code of the response.
- CVE-2017-9543High
Versions 2.0 to 3.1 of EFS Software Easy Chat Server contain a vulnerability that allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
- CVE-2017-9544Critical
There is a remote stack-based buffer overflow in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. An attacker may send an overly long username string to registresult.htm, potentially allowing arbitrary code execution.