1469 matches found
CVE-2024-29100: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4...
PT-2024-22710 · Unknown · Jordy Meow Ai Engine: Chatgpt Chatbot
Name of the Vulnerable Software and Affected Versions: Jordy Meow AI Engine: ChatGPT Chatbot versions n/a through 2.1.4 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. It affects the AI Engine: ChatGPT Chatbot. There is no information provided about the estimated numbe...
PT-2024-22720 · Unknown · Jordy Meow Ai Engine: Chatgpt Chatbot
Name of the Vulnerable Software and Affected Versions: Jordy Meow AI Engine: ChatGPT Chatbot versions n/a through 2.1.4 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the AI Engine: ChatGPT Chatbot. No information is provided about the...
WordPress AI Engine: ChatGPT Chatbot Plugin <= 2.1.4 is vulnerable to Server Side Request Forgery (SSRF)
Software AI Engine: ChatGPT Chatbot Type Plugin Vulnerable versions = 2.1.4 Fixed in 2.1.5 OWASP Top 10 A1: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2024-29090 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID 89edf8001a9b Credits Rafie...
CVE-2024-27963 WordPress Crisp – Live Chat and Chatbot plugin <= 0.44 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crisp allows Stored XSS.This issue affects Crisp: from n/a through 0.44...
CVE-2024-27963 WordPress Crisp – Live Chat and Chatbot plugin <= 0.44 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crisp allows Stored XSS.This issue affects Crisp: from n/a through 0.44...
CVE-2024-26454
A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...
Healthcare-Chatbot Security Vulnerability
Healthcare-Chatbot is a healthcare chatbot by Om Rajpurkar Personal Developer. A security vulnerability exists in Healthcare-Chatbot version 9b7058a and prior versions. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
CVE-2024-26454
A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...
CVE-2024-26454
The Healthcare-Chatbot software (versions through 9b7058a ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability is caused by the improper neutralization of input during web page generation, specifically when processing a crafted payload sent to the email1 or pwd1 parameters in t...
CVE-2024-26454
A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...
PT-2024-21381
Name of the Vulnerable Software and Affected Versions Healthcare-Chatbot versions through 9b7058a Description A Cross Site Scripting issue can occur via a crafted payload to the email1 or pwd1 parameter in "login.php". Recommendations For Healthcare-Chatbot versions through 9b7058a, as a temporar...
CVE-2024-26454
A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...
CVE-2024-26454: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting vulnerability in Healthcare-Chatbot through 9b7058a can occur via a crafted payload to the email1 or pwd1 parameter in login.php...
CVE-2024-28816
Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...
CVE-2024-28816
Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...
CVE-2024-28816
The Student Information Chatbot version a0196ab , a cloud-based student information system developed by Aarav Raj Singh, is vulnerable to SQL injection . The flaw exists in the login function within the index.php file, specifically caused by improper neutralization of special elements when proces...
PT-2024-22587
Name of the Vulnerable Software and Affected Versions Student Information Chatbot version a0196ab Description The issue allows SQL injection via the username to the login function in index.php. This can potentially lead to unauthorized access to sensitive data. Recommendations For version a0196ab...
Student Information Chatbot SQL Injection Vulnerability
Student Information Chatbot is a cloud-based student information chatbot system by the individual developer Aarav Raj Singh. A SQL injection vulnerability exists in Student Information Chatbot version a0196ab, which originates from allowing SQL to be injected into the login function in index.php...
CVE-2024-28816: Improper Neutralization of Special Elements used in an SQL Command
Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...