CVE-2023-30321

The CVE-2023-30321 entry concerns a Cross-Site Scripting (XSS) vulnerability in the wliang6 ChatEngine, specifically in the textMessage field of /src/chatbotapp/LoginServlet.java (commit fded8e710ad59f816867ad47d7fc4862f6502f3e). The underlying issue is insufficient input sanitization in the Logi...

ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in wliang6 ChatEngine version 1.0, which stems from a cross-site scripting XSS vulnerability in the username field...

ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in ChatEngine version 1.0, which is caused by a cross-site scripting XSS vulnerability in the username field...

CVE-2023-30320

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30320

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30322

The CVE-2023-30322 vulnerability, documented for Payatu ChatEngine v1.0, is a Cross-Site Scripting (XSS) issue in the username field of /src/chatbotapp/chatWindow.java that can allow an attacker to execute arbitrary code. Affected component/file: ChatEngine 1.0, + root cause described as input ha...

CVE-2023-30320

CVE-2023-30320 describes a Cross Site Scripting (XSS) in the wliang6 ChatEngine. Affected component: textMessage field in /src/chatbotapp/chatWindow.java (commit fded8e710ad59f816867ad47d7fc4862f6502f3e). The vulnerability allows attackers to execute arbitrary code. CVSSv3.1 score is 9.0 (CRITICA...

CVE-2023-30326

Cross Site Scripting XSS vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30321

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

CVE-2023-30319

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in ChatEngine, which stems from a cross-site scripting attack in the textMessage field of /src/chatbotapp/LoginServlet.java...

CVE-2023-30323

SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information...

CVE-2023-30322

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code...

PT-2023-22632 · Payatu · Payatu Chatengine

Name of the Vulnerable Software and Affected Versions: Payatu ChatEngine version 1.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the username field, located in the /src/chatbotapp/chatWindow.java file. This vulnerability allows attackers to execute arbitrary...

CVE-2023-30319

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

PT-2023-22635 · Unknown · Wliang6 Chatengine

Name of the Vulnerable Software and Affected Versions: wliang6 ChatEngine affected versions not specified Description: A Cross Site Scripting XSS issue exists in the username field of the /WebContent/WEB-INF/lib/chatbox.jsp file, allowing attackers to execute arbitrary code. This issue is related...

wliang6 ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in ChatEngine, which stems from a cross-site scripting attack in the textMessage field of /src/chatbotapp/chatWindow.java...

ChatEngine SQL注入漏洞

ChatEngine is a Java web application . A SQL injection vulnerability exists in ChatEngine v1.0, which originates from the textMessage parameter of /src/chatbotapp/chatWindow.java that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...

PT-2023-22633 · Unknown · Payatu Chatengine

Name of the Vulnerable Software and Affected Versions: Payatu ChatEngine version 1.0 Description: The issue allows attackers to gain sensitive information through a SQL Injection vulnerability in the username field, located in the /src/chatbotapp/chatWindow.java file. Recommendations: For Payatu...

PT-2023-22634 · Unknown · Chatengine

Name of the Vulnerable Software and Affected Versions: ChatEngine version 1.0 Description: The issue allows attackers to gain sensitive information through a SQL Injection vulnerability in the textMessage parameter in the /src/chatbotapp/chatWindow.java file. Recommendations: For ChatEngine versi...