register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/42154/ | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-06-11 23:29
Updated : 2021-03-26 10:56
NVD link : CVE-2017-9543
Mitre link : CVE-2017-9543
JSON object : View
CWE
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
Products Affected
echatserver
- easy_chat_server