Lucene search
+L

67 matches found

OSV
OSV
added 2023/07/06 3:15 p.m.5 views

CVE-2023-30323

SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information...

7.5CVSS5.8AI score0.00556EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/06 3:15 p.m.10 views

CVE-2023-30322

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code...

5.4CVSS6AI score0.00373EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/06 3:15 p.m.30 views

CVE-2023-30323

SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information...

7.5CVSS8AI score0.00556EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/06 3:15 p.m.33 views

CVE-2023-30325

SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information...

7.5CVSS8AI score0.00556EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/07/06 3:15 p.m.4 views

CVE-2023-30325

SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information...

7.5CVSS7.2AI score0.00556EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/07/06 3:15 p.m.3 views

CVE-2023-30322

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code...

5.4CVSS6.3AI score0.00373EPSS
SaveExploits0References3
OSV
OSV
added 2023/07/06 3:15 p.m.6 views

CVE-2023-30326

Cross Site Scripting XSS vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

6.1CVSS6AI score0.00395EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/06 3:15 p.m.25 views

CVE-2023-30322

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code...

5.4CVSS5.5AI score0.00373EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/07/06 3:15 p.m.2 views

CVE-2023-30323

SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information...

7.5CVSS7.2AI score0.00556EPSS
SaveExploits0References3
NVD
NVD
added 2023/07/06 3:15 p.m.28 views

CVE-2023-30326

Cross Site Scripting XSS vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

6.1CVSS6.1AI score0.00395EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/06 3:15 p.m.26 views

Sql injection

SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information...

5CVSS8AI score0.00556EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/07/06 3:15 p.m.27 views

Cross site scripting

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code...

4.9CVSS5.5AI score0.00373EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/07/06 3:15 p.m.23 views

Cross site scripting

Cross Site Scripting XSS vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

5.8CVSS6.2AI score0.00395EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/07/06 3:15 p.m.23 views

Sql injection

SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information...

5CVSS8AI score0.00556EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/06 12:0 a.m.9 views

CVE-2023-30320

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

6.3AI score0.00939EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/07/06 12:0 a.m.13 views

CVE-2023-30319

Cross Site Scripting XSS vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...

6.3AI score0.00888EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.8 views

ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in wliang6 ChatEngine version 1.0, which stems from a cross-site scripting XSS vulnerability in the username field...

6.1CVSS5.8AI score0.00395EPSS
SaveExploits0References3
CVE
CVE
added 2023/07/06 12:0 a.m.55 views

CVE-2023-30319

ChatEngine (Java web app) is affected by a cross-site scripting (XSS) vulnerability in the username field of /src/chatbotapp/LoginServlet.java, observed in commit fded8e710ad59f816867ad47d7fc4862f6502f3e. The issue allows arbitrary code execution as described in multiple sources referencing CVE-2...

9.6CVSS8.4AI score0.00888EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2023/07/06 12:0 a.m.55 views

CVE-2023-30322

The CVE-2023-30322 vulnerability, documented for Payatu ChatEngine v1.0, is a Cross-Site Scripting (XSS) issue in the username field of /src/chatbotapp/chatWindow.java that can allow an attacker to execute arbitrary code. Affected component/file: ChatEngine 1.0, + root cause described as input ha...

5.4CVSS5.5AI score0.00373EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/07/06 12:0 a.m.44 views

CVE-2023-30323

Payatu ChatEngine v1.0 is affected by CVE-2023-30323 due to a SQL injection in the username field of /src/chatbotapp/chatWindow.java, enabling exposure of sensitive information. The root cause is a SQL injection vulnerability in the username input path; no detailed exploit specifics are provided ...

7.5CVSS8AI score0.00556EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder