Echatserver

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Echatserver records in CISA KEV

No Echatserver vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy Chat Server 7 records HIGH

Records

7 records in Easy Chat Server · all components

TI-2018-15446 CVE-2018-25221 · GHSA-4xgm-gv32-5pqv

EChat Server 3.1 Buffer Overflow via chat.ghp username Parameter

HIGH 81

EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00836 Published 2026-03-28 No fix listed CWE-787

TI-2019-15666 CVE-2019-25613 · GHSA-phg5-3h7x-599v

Easy Chat Server 3.1 Denial of Service via message Parameter

HIGH 77

Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00526 Published 2026-03-22 No fix listed CWE-940

TI-2017-06947 CVE-2017-9544 · GHSA-v53x-rh5j-prv2

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy…

MEDIUM 63

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24118 Published 2017-06-12 No fix listed CWE-787

TI-2022-22094 CVE-2022-44939 · GHSA-gqx3-wh79-gf57

Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking…

LOW 36

Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00404 Published 2023-01-06 No fix listed CWE-427

TI-2017-06958 CVE-2017-9557 · GHSA-8cqr-9pf4-pv2f

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers…

LOW 36

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML sour…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01673 Published 2017-06-12 No fix listed CWE-522

TI-2017-06946 CVE-2017-9543 · GHSA-mmx4-rrqx-q94x

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers…

LOW 36

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01332 Published 2017-06-12 No fix listed CWE-640

TI-2019-14728 CVE-2019-20502 · GHSA-qj55-crj2-57h4

An issue was discovered in EFS Easy Chat Server 3.1.

LOW 35

An issue was discovered in EFS Easy Chat Server 3.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0111 Published 2020-03-05 No fix listed CWE-120

Open these records in search →

Critical	2
High	5
Medium	0
Low	0
No CVSS	0