CVE-2004-2646

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.62%

Published

Dec 31, 2004

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBFree Web Chat Initial Release - UserManager.java Null Pointer Denial of Service

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (uncaught NullPointerException) via unknown attack vectors that cause the usrName variable to be null.

Affected Products (1)

reid_garner · free_web_chat

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html

ExploitPatch

http://marc.info/?l=bugtraq&m=109164397601049&w=2

http://securitytracker.com/alerts/2004/Aug/1010851.html

ExploitPatch

http://www.osvdb.org/8369

http://www.securityfocus.com/bid/10863

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/16893

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html

ExploitPatch

http://marc.info/?l=bugtraq&m=109164397601049&w=2

http://securitytracker.com/alerts/2004/Aug/1010851.html

ExploitPatch

http://www.osvdb.org/8369

http://www.securityfocus.com/bid/10863

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/16893

KEV Catalog EPSS Scores Vendors All CVEs