CVE Intelligence

Echatserver EChat Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Echatserver EChat Server: 1 record(s), with affected versions and fixes.

CVE-2018-25221 Critical · 9.8 CWE-787 Mar 28, 2026
EChat Server 3.1 Buffer Overflow via chat.ghp username Parameter
EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username parameter. Attackers can send a GET request to chat.ghp with a malicious username value containing shellcode and ROP gadgets to achieve code execution in the application context.