Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-4494

Published: 04/10/2023 Updated: 06/10/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Easy Chat Server

Vulnerability Summary

Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register.ghp file asking for the name via a GET request resulting in arbitrary code execution on the remote machine.

Vulnerable Product Search on Vulmon Subscribe to Product

easy chat server project easy chat server 3.1

Exploits

Exploit DB: Easy Address Book Web Server 1.6 Buffer Overflow / Cross Site Scripting
Easy Address Book Web Server version 16 suffers from buffer overflow and cross site scripting vulnerabilities ...

References

CWE-119https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-productshttps://nvd.nist.govhttps://packetstormsecurity.com/files/174432/Easy-Address-Book-Web-Server-1.6-Buffer-Overflow-Cross-Site-Scripting.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook