This vulnerability involves a directory traversal flaw in Easy Chat Server 3.1, where improper validation of the UserName parameter enables an attacker to traverse directories. This can lead to unauthorized disclosure of sensitive information and potentially arbitrary code execution. The vulnerability is publicly disclosed but lacks detailed technical data, CVSS scoring, or vendor remediation information.

Successful exploitation could allow remote attackers to access sensitive files and execute arbitrary code on the server running Easy Chat Server 3.1. This could compromise the confidentiality, integrity, and availability of the affected system. However, no known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected service and monitor for suspicious activity related to the UserName parameter. Avoid exposing the Easy Chat Server to untrusted networks if possible.