CVE-2023-30322

The CVE-2023-30322 vulnerability, documented for Payatu ChatEngine v1.0, is a Cross-Site Scripting (XSS) issue in the username field of /src/chatbotapp/chatWindow.java that can allow an attacker to execute arbitrary code. Affected component/file: ChatEngine 1.0, + root cause described as input ha...

CVE-2023-30325

CVE-2023-30325 describes a SQL injection vulnerability in the Java-based ChatEngine v1.0, specifically via the textMessage parameter in /src/chatbotapp/chatWindow.java. The weakness allows an attacker to potentially exfiltrate sensitive data. Public sources consistently identify the affected comp...

CVE-2023-30326

CVE-2023-30326 : XSS vulnerability in wliang6 ChatEngine, in the file /WebContent/WEB-INF/lib/chatbox.jsp (username field). The root cause is improper input handling in chatbox.jsp, enabling injection of scripts. Affected product: wliang6 ChatEngine (version 1.0 per CNNVD/CVE context). Impact per...

CVE-2023-30323

Payatu ChatEngine v1.0 is affected by CVE-2023-30323 due to a SQL injection in the username field of /src/chatbotapp/chatWindow.java, enabling exposure of sensitive information. The root cause is a SQL injection vulnerability in the username input path; no detailed exploit specifics are provided ...

ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in ChatEngine version 1.0, which is caused by a cross-site scripting XSS vulnerability in the username field...

CVE-2023-30321

The CVE-2023-30321 entry concerns a Cross-Site Scripting (XSS) vulnerability in the wliang6 ChatEngine, specifically in the textMessage field of /src/chatbotapp/LoginServlet.java (commit fded8e710ad59f816867ad47d7fc4862f6502f3e). The underlying issue is insufficient input sanitization in the Logi...

ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in wliang6 ChatEngine version 1.0, which stems from a cross-site scripting XSS vulnerability in the username field...