CVE-2017-9557

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in…

published June 12, 2017

CVSS
—
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01673 · 76.5th percentile
Published
2017-06-12T15:00Z
EPSS history
Timeline
  • 12 JUN 15:00Z
    register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in…
    cvelistv5