Easy Chat Server Project

Easy Chat Server

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2024-0695

Exploit
  • EPSS 0.05%
  • Veröffentlicht 18.01.2024 23:15:08
  • Zuletzt bearbeitet 21.11.2024 08:47:09

A vulnerability, which was classified as problematic, has been found in EFS Easy Chat Server 3.1. Affected by this issue is some unknown functionality of the component HTTP GET Request Handler. The manipulation of the argument USERNAME leads to denia...

9.8

CVE-2023-4494

  • EPSS 0.13%
  • Veröffentlicht 04.10.2023 13:15:26
  • Zuletzt bearbeitet 21.11.2024 08:35:17

Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register.ghp file asking for the name via a GET request resulting in arbitrary code execution on the remote m...

6.1

CVE-2023-4495

  • EPSS 0.12%
  • Veröffentlicht 04.10.2023 13:15:26
  • Zuletzt bearbeitet 21.11.2024 08:35:17

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume parameter. The XSS is loaded from...

6.1

CVE-2023-4496

  • EPSS 0.12%
  • Veröffentlicht 04.10.2023 13:15:26
  • Zuletzt bearbeitet 21.11.2024 08:35:17

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /body2.ghp (POST method), in the mtowho parameter.

6.1

CVE-2023-4497

  • EPSS 0.12%
  • Veröffentlicht 04.10.2023 13:15:26
  • Zuletzt bearbeitet 21.11.2024 08:35:17

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Icon parameter. The XSS is loaded from /...