VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 12, 2017· Updated Jun 17, 2026

CVE-2017-9557

CVE-2017-9557

Description

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • EFS Software/Easy Chat Server2 versions
    cpe:2.3:a:echatserver:easy_chat_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:echatserver:easy_chat_server:*:*:*:*:*:*:*:*range: >=2.0,<=3.1
    • (no CPE)range: 2.0 to 3.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.