TI-2024-00640 CVE-2024-0695 · GHSA-2h63-m6jf-2cm7
EFS Easy Chat Server HTTP GET Request denial of service
Priority MEDIUM 63
A vulnerability, which was classified as problematic, has been found in EFS Easy Chat Server 3.1.
Easy Chat Server Project
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Easy Chat Server Project records in CISA KEVNo Easy Chat Server Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Easy Chat Server · all components
TI-2023-04147 CVE-2023-4494 · GHSA-9qx7-9x6x-94r9
Easy Chat Server Stack-based buffer overflow vulnerability
Priority MEDIUM 51
Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version.
TI-2023-04150 CVE-2023-4497 · GHSA-j827-c7gh-xmmj
Easy Chat Server XSS vulnerability
Priority LOW 28
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Icon param…
TI-2023-04149 CVE-2023-4496 · GHSA-vghr-xgqc-8gpm
Easy Chat Server XSS vulnerability
Priority LOW 28
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /body2.ghp (POST method), in the mtowho parameter.
TI-2023-04148 CVE-2023-4495 · GHSA-2hpg-33j4-xvq2
Easy Chat Server XSS vulnerability
Priority LOW 28
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume par…