VULNERABILITY INTELLIGENCE

CVE-2017-9557

CVSS score7.5 HIGH

EPSS probability1.67%

CISA KEVNot currently listed

Published2017-06-12

Last modified2026-06-17

Description

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.