17 matches found
Online Chatting System SQL Injection Vulnerability (CNVD-2024-23320)
Online Chatting System is an online chatting system. A SQL injection vulnerability exists in Online Chatting System version 1.0, which originates from the parameter id of the file admin/updateroom.php that lacks validation of externally entered SQL statements. An attacker can exploit this...
CVE-2024-2932
CVE-2024-2932 affects SourceCodester Online Chatting System 1.0. The vulnerability is in the admin/update_room.php function, where the id parameter can be manipulated to trigger SQL injection. This can be exploited remotely and the vulnerability has been publicly disclosed. Concerning impact, the...
CVE-2024-2932 SourceCodester Online Chatting System update_room.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unknown function of the file admin/updateroom.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2024-2932 SourceCodester Online Chatting System update_room.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unknown function of the file admin/updateroom.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Online Chatting System 1.0 SQL注入漏洞
Online Chatting System is an online chatting system. A SQL injection vulnerability exists in Online Chatting System version 1.0, which originates from the parameter id of the file admin/updateroom.php that lacks validation of externally entered SQL statements. An attacker can exploit this...
Online Chatting System 1.0 SQL Injection
Exploit Title: online Chatting System 1.0 - 'id' SQL Injection Google Dork: N/A Date: 2020-05-17 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14224/online-chatting-system-using-phpmysql.html Software Link:...
Chatting System PHP Ajax MySQL JavaScript 1.0 Cross Site Scripting
Exploit Title: Chatting System PHP Ajax MySQL JavaScript - xss Google Dork: N/A Date: 2017/31/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://www.codester.com/IngeniousDeveloper Software Buy:...
Simple Chatting System Arbitrary File Upload Vulnerability
Simple Chatting System is a PHP-based online chatting application. An arbitrary file upload vulnerability exists in Simple Chatting System version 1.0. The vulnerability can be exploited to upload arbitrary files via the view/myprofile.php file...
CVE-2017-17593
Simple Chatting System 1.0 allows Arbitrary File Upload via view/myprofile.php, which places files under uploads/...
CVE-2017-17593
Simple Chatting System 1.0 allows Arbitrary File Upload via view/myprofile.php, which places files under uploads/...
Design/Logic Flaw
Simple Chatting System 1.0 allows Arbitrary File Upload via view/myprofile.php, which places files under uploads/...
CVE-2017-17593
CVE-2017-17593 affects Simple Chatting System 1.0 (PHP-based). The vulnerability is an arbitrary file upload via the endpoint view/my_profile.php, which allows uploaded files to be placed under uploads/. Root cause: insufficient input validation on file uploads (as described across CNVD/NVD recor...
CVE-2017-17593
Simple Chatting System 1.0 allows Arbitrary File Upload via view/myprofile.php, which places files under uploads/...
Simple Chatting System 1.0.0 Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: Simple Chatting System 1.0 - Arbitrary File Upload Dork: N/A Date: 08.12.2017 Vendor Homepage: http://yourphpscript.com/ Software Link: http://yourphpscript.com/index.php/product/simple-chatting-system-php-ajax-mysql-javascript/...
Simple Chatting System 1.0.0 - Arbitrary File Upload
Exploit Title: Simple Chatting System 1.0 - Arbitrary File Upload Dork: N/A Date: 08.12.2017 Vendor Homepage: http://yourphpscript.com/ Software Link: http://yourphpscript.com/index.php/product/simple-chatting-system-php-ajax-mysql-javascript/ Demo: http://chat.yourphpscript.com/ Version: 1.0...
Simple Chatting System 1.0.0 Arbitrary File Upload
Exploit Title: Simple Chatting System 1.0 - Arbitrary File Upload Dork: N/A Date: 08.12.2017 Vendor Homepage: http://yourphpscript.com/ Software Link: http://yourphpscript.com/index.php/product/simple-chatting-system-php-ajax-mysql-javascript/ Demo: http://chat.yourphpscript.com/ Version: 1.0...
Simple Chatting System 1.0.0 - Arbitrary File Upload
Simple Chatting System 1.0.0 - Arbitrary File Upload Exploit Title: Simple Chatting System 1.0 - Arbitrary File Upload Dork: N/A Date: 08.12.2017 Vendor Homepage: http://yourphpscript.com/ Software Link: http://yourphpscript.com/index.php/product/simple-chatting-system-php-ajax-mysql-javascript/...