CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2017-06-12

Last modified

2024-08-05

Weaknesses

CWE-640

Affected products

• Easy Chat Server (Echatserver)

References

• https://www.exploit-db.com/exploits/42154/