PT-2026-27001 · Echatserver · Easy Chat+1

Published 2026-03-22 · Updated 2026-03-22 · CVE-2019-25613

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Easy Chat Server version 3.1

Description Easy Chat Server 3.1 has a denial of service issue. Remote attackers can crash the application by sending oversized data in the message parameter. Attackers can establish a session via the ''chat.ghp'' endpoint and then send a POST request to ''body2.ghp'' with an excessively large message parameter value to cause the service to crash.

Recommendations Ensure the message parameter does not contain excessively large data values. Limit the size of incoming data to prevent the application from crashing.

Exploit

Fix

Weakness Enumeration

CWE-940

Related Identifiers

CVE-2019-25613

Affected Products

Easy Chat

Easy Chat Server

References · 5

• 🔥 https://exploit-db.com/exploits/46806 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25613 · Security Note
• http://echatserver.com/ecssetup.exe · Note
• http://echatserver.com · Note
• https://vulncheck.com/advisories/easy-chat-server-denial-of-service-via-message-parameter · Note