Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-4495

Published: 04/10/2023 Updated: 06/10/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Easy Chat Server

Vulnerability Summary

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume parameter. The XSS is loaded from /register.ghp.

Vulnerable Product Search on Vulmon Subscribe to Product

easy chat server project easy chat server

Exploits

Exploit DB: Easy Address Book Web Server 1.6 Buffer Overflow / Cross Site Scripting
Easy Address Book Web Server version 16 suffers from buffer overflow and cross site scripting vulnerabilities ...

References

CWE-79https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-productshttps://nvd.nist.govhttps://packetstormsecurity.com/files/174432/Easy-Address-Book-Web-Server-1.6-Buffer-Overflow-Cross-Site-Scripting.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook