register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NEchatserver Easy Chat Server
APPEchatserver2.0 – 3.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2018-25221CRITICAL9.3PL ✓same product
EChat Server 3.1 – buffer overflow w endpoint chat.ghp umożliwiający RCE
CVE-2017-9544CRITICAL9.8PL ✓same product
RCE via stack-based buffer overflow w Easy Chat Server (SEH)
CVE-2019-25613HIGH8.7same product
Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the appl...
CVE-2022-44939HIGH7.8same product
Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the comp...
CVE-2019-20502HIGH7.5same product
An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message p...