CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

CVE-2017-9543

The CVE-2017-9543 entry concerns EFS Software Easy Chat Server (versions 2.0–3.1). The underlying issue is in the register.ghp handling, which allows a remote attacker to reset arbitrary user passwords by sending a crafted POST to registresult.htm. Reported impact includes the ability to change p...

CVE-2017-9543: Weak Password Recovery Mechanism for Forgotten Password

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

PT-2017-19005

Name of the Vulnerable Software and Affected Versions EFS Software Easy Chat Server versions 2.0 to 3.1 Description The issue allows remote attackers to reset arbitrary passwords via a crafted POST request to "registresult.htm". This is a significant problem as it can lead to unauthorized access ...

EFS Easy Chat Server 3.1 - Password Reset Exploit

Exploit for windows platform in category web applications Exploit Title: Easy Chat Server Remote Password Reset Date: 09/10/2017 Software Link: http://echatserver.com/ecssetup.exe Exploit Author: Aitezaz Mohsin Vulnerable Version: v2.0 to v3.1 Vulnerability Type: Pre-Auth Remote Password Reset...

WSTShop suffers from an administrator password reset vulnerability

WSTShop e-commerce system is a single merchant e-commerce system based on PHP+MySQL. WSTShop suffers from an administrator password reset vulnerability. The vulnerability stems from an installation file bypass, which can be exploited by an attacker to reset the administrator password...

Huacheng Gas Group Android APP has design flaws

Huacheng Gas Group Android APP is a client application that provides users with integrated management of remote meter reading and online bill payment. There is a design vulnerability in the verification code of Huacheng Gas Group Android APP. An attacker can use the vulnerability to reset any...

Easy Chat Server 3.1 Remote Password Reset

Exploit Title: Easy Chat Server Remote Password Reset Date: 09/10/2017 Software Link: http://echatserver.com/ecssetup.exe Exploit Author: Aitezaz Mohsin Vulnerable Version: v2.0 to v3.1 Vulnerability Type: Pre-Auth Remote Password Reset Severity: Critical...

EFS Easy Chat Server 3.1 - Password Reset

EFS Easy Chat Server 3.1 - Password Reset Exploit Title: Easy Chat Server Remote Password Reset Date: 09/10/2017 Software Link: http://echatserver.com/ecssetup.exe Exploit Author: Aitezaz Mohsin Vulnerable Version: v2.0 to v3.1 Vulnerability Type: Pre-Auth Remote Password Reset Severity: Critical...

EFS Easy Chat Server 3.1 - Password Reset

Exploit Title: Easy Chat Server Remote Password Reset Date: 09/10/2017 Software Link: http://echatserver.com/ecssetup.exe Exploit Author: Aitezaz Mohsin Vulnerable Version: v2.0 to v3.1 Vulnerability Type: Pre-Auth Remote Password Reset Severity: Critical...

Subsonic Password Reset Vulnerability

Subsonic is a media streaming server that allows users to save music or collect videos on the server. A password reset vulnerability exists in Subsonic. Due to a design flaw in the change reset password feature, an attacker could exploit the vulnerability to reset a specified user's password...

Arbitrary User Password Reset Vulnerability in BBCBuilder E-Commerce System

BBCBuilder e-commerce system is a b2b2c model developed by Yuanfeng Company, which supports the e-commerce system of platform self-supporting and supplier store coexistence mode. BBCBuilder e-commerce system version 2.6.1, there is an arbitrary user password reset vulnerability, attackers use the...

Kang Kang Smart Blood Pressure Monitor Android app has arbitrary user password reset vulnerability

KangKang Smart Blood Pressure Monitor Android app is a blood pressure management tool client that provides users with the convenience of measuring, recording, analyzing, and viewing. KangKang Smart Blood Pressure Monitor Android app has an arbitrary user password reset vulnerability, a remote...

Arbitrary User Password Reset Vulnerability in MyoHealth Android App

MyoHealth Android app is a mobile health management platform client that provides good health behavior management services for corporate users. MyoHealth Android app has an arbitrary user password reset vulnerability that allows an attacker to reset another person's password via their cell phone...

Subsonic 6.1.1 - Cross-Site Request Forgery Vulnerability

Exploit for windows platform in category web applications + Credits: John Page a.k.a hyp3rlinx Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming server. You install it on your own computer where you keep your music or video collection...

Subsonic 6.1.1 - Cross-Site Request Forgery

Subsonic 6.1.1 - Cross-Site Request Forgery + Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-PASSWORD-RESET-CSRF.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: =============== subson...

Subsonic 6.1.1 - Cross-Site Request Forgery

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-PASSWORD-RESET-CSRF.txt + ISR: ApparitionSec Vendor: ================ www.subsonic.org Product: =============== subsonic v6.1.1 Subsonic is a media streaming...

Debian DLA-975-1 : wordpress security update

Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2017-8295 Potential unauthorized password reset vulnerability. More information are available at :...