CVE-2023-30325

CVE-2023-30325 describes a SQL injection vulnerability in the Java-based ChatEngine v1.0, specifically via the textMessage parameter in /src/chatbotapp/chatWindow.java. The weakness allows an attacker to potentially exfiltrate sensitive data. Public sources consistently identify the affected comp...

CVE-2023-30319

ChatEngine (Java web app) is affected by a cross-site scripting (XSS) vulnerability in the username field of /src/chatbotapp/LoginServlet.java, observed in commit fded8e710ad59f816867ad47d7fc4862f6502f3e. The issue allows arbitrary code execution as described in multiple sources referencing CVE-2...

CVE-2023-30321

The CVE-2023-30321 entry concerns a Cross-Site Scripting (XSS) vulnerability in the wliang6 ChatEngine, specifically in the textMessage field of /src/chatbotapp/LoginServlet.java (commit fded8e710ad59f816867ad47d7fc4862f6502f3e). The underlying issue is insufficient input sanitization in the Logi...

CVE-2023-30323

Payatu ChatEngine v1.0 is affected by CVE-2023-30323 due to a SQL injection in the username field of /src/chatbotapp/chatWindow.java, enabling exposure of sensitive information. The root cause is a SQL injection vulnerability in the username input path; no detailed exploit specifics are provided ...

CVE-2023-30326

CVE-2023-30326 : XSS vulnerability in wliang6 ChatEngine, in the file /WebContent/WEB-INF/lib/chatbox.jsp (username field). The root cause is improper input handling in chatbox.jsp, enabling injection of scripts. Affected product: wliang6 ChatEngine (version 1.0 per CNNVD/CVE context). Impact per...

CVE-2023-30326

Cross Site Scripting XSS vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30322: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code...

CVE-2023-30321: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30320: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30320

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30325

SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information...

CVE-2023-30320

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30323

SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information...

CVE-2023-30321

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

PT-2023-22633 · Unknown · Payatu Chatengine

Name of the Vulnerable Software and Affected Versions: Payatu ChatEngine version 1.0 Description: The issue allows attackers to gain sensitive information through a SQL Injection vulnerability in the username field, located in the /src/chatbotapp/chatWindow.java file. Recommendations: For Payatu...

CVE-2023-30322

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code...

CVE-2023-30319: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30326: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30323: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information...

wliang6 ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in ChatEngine, which stems from a cross-site scripting attack in the textMessage field of /src/chatbotapp/chatWindow.java...