Filtered by vendor Echatserver Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-44939 1 Echatserver 1 Easy Chat Server 2023-01-12 7.8 High
Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL.
CVE-2017-9557 1 Echatserver 1 Easy Chat Server 2022-10-03 7.5 High
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.
CVE-2017-9544 1 Echatserver 1 Easy Chat Server 2021-03-26 9.8 Critical
There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.
CVE-2017-9543 1 Echatserver 1 Easy Chat Server 2021-03-26 7.5 High
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
CVE-2019-20502 1 Echatserver 1 Easy Chat Server 2020-03-06 7.5 High
An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter.