Echatserver Easy Chat Server
7 CVEs affecting Echatserver Easy Chat Server. Latest disclosed: 2026-03-28. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-25221 | Critical | 9.8 | 2026-03-28 | EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an overs… |
CVE-2017-9544 | Critical | 9.8 | 2017-06-12 | There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username st… |
CVE-2022-44939 | High | 7.8 | 2023-01-06 | Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows… |
CVE-2019-25613 | High | 7.5 | 2026-03-22 | Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message… |
CVE-2019-20502 | High | 7.5 | 2020-03-05 | An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter. |
CVE-2017-9557 | High | 7.5 | 2017-06-12 | register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunctio… |
CVE-2017-9543 | High | 7.5 | 2017-06-12 | register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresu… |