← back
CVE-2004-2646

CVE-2004-2646

EPSS 3.6%
The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (uncaught NullPointerException) via unknown attack vectors that cause the usrName variable to be null.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/24351unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.htmlhttp://marc.info/?l=bugtraq&m=109164397601049&w=2http://securitytracker.com/alerts/2004/Aug/1010851.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16893http://www.osvdb.org/8369http://www.securityfocus.com/bid/10863