Vulnerabilidades do Echatserver EChat Server
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Echatserver EChat Server: 1 registro(s), com versões afetadas e correções.
CVE-2018-25221
Crítica · 9.8
CWE-787 28/03/2026
EChat Server 3.1 Buffer Overflow via chat.ghp username Parameter
EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username parameter. Attackers can send a GET request to chat.ghp with a malicious username value containing shellcode and ROP gadgets to achieve code execution in the application context.