Easy Chat Server
Approved changes feed: RSS · Atom
cpe:2.3:a:echatserver:easy_chat_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Echatserver (376346dd-3c7e-5b28-9a32-6ddfac4a0b9b) |
|---|---|
| Product | Easy Chat Server (36c2f387-f445-5ff4-94cd-6ac75e66481a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25221 |
vulnerable | 2026-06-08 05:11:29.603978 |
EChat Server 3.1 Buffer Overflow via chat.ghp username Parameter
CRITICAL (9.8)
EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username parameter. Attackers can send a GET request to chat.ghp with a malicious username value containing shellcode and ROP gadgets to achieve code execution in the application context.
Published: 2026-03-28T11:58:13.951Z
Updated: 2026-03-30T15:52:11.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9557 |
vulnerable | 2026-06-08 05:10:10.160447 |
Details available
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.
Published: 2017-06-12T15:00:00.000Z
Updated: 2024-09-16T17:18:27.233Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9544 |
vulnerable | 2026-06-08 05:10:10.114626 |
Details available
There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.
Published: 2017-06-12T06:00:00.000Z
Updated: 2024-08-05T17:11:02.122Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9543 |
vulnerable | 2026-06-08 05:10:10.114243 |
Details available
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
Published: 2017-06-12T06:00:00.000Z
Updated: 2024-08-05T17:11:02.191Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.