Description
Easy Chat Server 3.1 contains a denial of service vulnerability that allows remote attackers to crash the application by sending oversized data in the message parameter. Attackers can establish a session via the chat.ghp endpoint and then send a POST request to body2.ghp with an excessively large message parameter value to cause the service to crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Echatserver | Easy Chat | 3.1 | — |
References
- ExploitDB-46806 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Easy Chat Server 3.1 Denial of Service via message Parameter third-party-advisory