PT-2026-27001 · Echatserver · Easy Chat+1

Publicado 2026-03-22 · Atualizado 2026-03-22 · CVE-2019-25613

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Easy Chat Server version 3.1

Description Easy Chat Server 3.1 has a denial of service issue. Remote attackers can crash the application by sending oversized data in the message parameter. Attackers can establish a session via the ''chat.ghp'' endpoint and then send a POST request to ''body2.ghp'' with an excessively large message parameter value to cause the service to crash.

Recommendations Ensure the message parameter does not contain excessively large data values. Limit the size of incoming data to prevent the application from crashing.

Exploit

Correção

Enumeração de Fraquezas

CWE-940

Identificadores relacionados

CVE-2019-25613

Produtos afetados

Easy Chat

Easy Chat Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/46806 · Exploit
• http://echatserver.com/ecssetup.exe · Nota
• http://echatserver.com · Nota
• https://vulncheck.com/advisories/easy-chat-server-denial-of-service-via-message-parameter · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25613 · Nota de Segurança