Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2022-44939
Disclosure Date: January 06, 2023 (last updated February 24, 2025)
Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL.
0
Attacker Value
Unknown
CVE-2019-20502
Disclosure Date: March 05, 2020 (last updated February 21, 2025)
An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter.
0
Attacker Value
Unknown
CVE-2017-9557
Disclosure Date: June 12, 2017 (last updated November 26, 2024)
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.
0
Attacker Value
Unknown
CVE-2017-9543
Disclosure Date: June 12, 2017 (last updated November 26, 2024)
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
0
Attacker Value
Unknown
CVE-2017-9544
Disclosure Date: June 12, 2017 (last updated November 26, 2024)
There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.
0
