Lucene search
+L

69 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•0 views

CVE-2025-0882: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The...

7.5CVSS5.4AI score0.00446EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/17 4:00 p.m.•12 views

CVE-2025-0531 code-projects Chat System leaveroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS7.4AI score0.00447EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/17 4:00 p.m.•69 views

CVE-2025-0531

CVE-2025-0531 affects code-projects Chat System 1.0. A SQL injection flaw exists in the /user/leaveroom.php?id= parameter caused by lack of input validation. This allows remote attackers to exploit the vulnerability, with confidentiality impact described as HIGH in the NVD metrics and public disc...

7.5CVSS7.7AI score0.00447EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/01/17 4:00 p.m.•41 views

CVE-2025-0531 code-projects Chat System leaveroom.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS0.00447EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•0 views

CVE-2025-0531: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

7.5CVSS5.5AI score0.00447EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/02 4:15 p.m.•10 views

CVE-2025-0172

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

7.5CVSS6.4AI score0.00446EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/02 3:31 p.m.•18 views

CVE-2025-0172 code-projects Chat System deleteroom.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

6.5CVSS7.4AI score0.00446EPSS
SaveExploits1References5
OSV
OSV
•added 2025/01/02 3:15 p.m.•16 views

CVE-2025-0171

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

7.5CVSS5.7AI score0.00446EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/02 3:00 p.m.•71 views

CVE-2025-0171

CVE-2025-0171 affects code-projects Chat System 1.0. A SQL injection exists in the unknown function of /admin/deleteuser.php, exploitable remotely via the id parameter. Multiple sources classify the issue as critical with public disclosures. There is no provided official fixed version in the docu...

7.5CVSS7.6AI score0.00446EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•0 views

CVE-2025-0172: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

7.5CVSS5.5AI score0.00446EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•21 views

PT-2025-3761 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting an unknown functionality of the file /admin/deleteroom.php. The manipulation of the id argument leads to SQL...

7.5CVSS6.9AI score0.00446EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•21 views

PT-2025-3760 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical vulnerability was found in the code-projects Chat System. It affects an unknown function of the file /admin/deleteuser.php. The manipulation of the id argument leads to SQL...

7.5CVSS6.8AI score0.00446EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•1 views

CVE-2025-0171: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/deleteuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

7.5CVSS5.5AI score0.00446EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/30 2:31 a.m.•44 views

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.5CVSS0.00408EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/12/30 2:31 a.m.•18 views

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.5CVSS7.5AI score0.00408EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/30 2:00 a.m.•74 views

CVE-2024-13034

The CVE-2024-13034 entry describes a cross-site scripting vulnerability in code-projects Chat System 1.0, affecting an unknown portion of /admin/update_user.php. The issue arises from improper handling of the name argument, enabling remote exploitation and with an exploit publicly disclosed. Conn...

7.6CVSS3.7AI score0.00467EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/30 1:31 a.m.•15 views

CVE-2024-13033 code-projects Chat System chatroom.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS6.2AI score0.00305EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/12/30 1:31 a.m.•36 views

CVE-2024-13033 code-projects Chat System chatroom.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS0.00305EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/30 12:00 a.m.•18 views

PT-2024-17891 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A problematic vulnerability was found in the code-projects Chat System, affecting an unknown part of the file /admin/update user.php. The manipulation of the name argument leads to cross-site...

7.6CVSS4.3AI score0.00467EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•1 views

CVE-2024-13034: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...

7.6CVSS4AI score0.00467EPSS
SaveExploits0References1
Rows per page
Query Builder