CVE-2024-13020 code-projects Chat System chatroom.php sql injection

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2024-13020 code-projects Chat System chatroom.php sql injection

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2024-13020

CVE-2024-13020 affects code-projects Chat System 1.0. The vulnerability is an SQL injection in the /admin/chatroom.php file triggered by manipulating the id parameter, with remote access possible and a public exploit. Root cause: insufficient input validation/filtering on id. Impact: potential da...

CVE-2024-13019

CVE-2024-13019 affects code-projects Chat System 1.0. The vulnerability arises in the /admin/update_room.php component, where the input parameter named name is not properly validated/escaped, enabling cross-site scripting. Exploitation is described as remote. Several sources corroborate the issue...

CVE-2024-13019 code-projects Chat System Chat Room Page update_room.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/updateroom.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack...

CVE-2024-13019 code-projects Chat System Chat Room Page update_room.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/updateroom.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack...

Simple Chat System 1.0 Cross Site Scripting

Exploit Title:Simple Chat System 1.0 Reflected XSS Date:05/12/2024 Exploit Author:Merve Hatice Arslan Vendor Homepage:https://code-projects.org/simple-chat-system/ Sofware Link:https://download.code-projects.org/details/ec6340ea-ef68-48d9-b9b2-da397f52b2dc Version:1.0 Tested on:Linux / XAMPP...

CVE-2024-47170

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue can lead to unauthorized access to sensitive information an...

CVE-2024-47171

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended...

CVE-2024-47170

Agnai before 1.0.330 is affected by a path traversal vulnerability that allows an attacker to read arbitrary JSON files on the server when JSON_STORAGE is enabled. The issue arises from reading files without proper validation in the JSON handling path, exposing sensitive configuration data. Versi...

CVE-2024-47169

Summary: CVE-2024-47169 affects Agnai prior to version 1.0.330, enabling attackers to upload arbitrary files (including JavaScript) to attacker-controlled locations and potentially overwrite existing server files, leading to remote code execution and full server compromise. The issue is tied to i...

CVE-2024-4975

A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the component Message Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-4975

A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the component Message Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-4974

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4974

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4973

A vulnerability classified as critical was found in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument name/number/address leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-4973

A vulnerability classified as critical was found in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument name/number/address leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-4975

Summary: CVE-2024-4975 affects code-projects Simple Chat System 1.0, specifically the Message Handler component. The connected PT-2024-33661 and related sources confirm a cross-site scripting (XSS) vulnerability that can be triggered remotely. The exploit has been disclosed publicly. Affected com...

CVE-2024-4974 code-projects Simple Chat System register.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4974

CVE-2024-4974 affects code-projects Simple Chat System 1.0, specifically the /register.php file. The vulnerability arises from manipulation of the name argument, enabling cross-site scripting (XSS). The issue is exploitable remotely, and public disclosure is noted. Multiple connected documents co...