CVE-2017-9543 register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| echatserver easy chat server | >= 2.0, <= 3.1 | No fix listed |
References
- 42154 exploit third-party-advisory vdb-entry