Lucene search
K

49 matches found

CNNVD
CNNVD
added 2026/05/08 12:0 a.m.3 views

Code-Projects Simple Chat System 注入漏洞

Code-Projects Simple Chat System is an easy-to-use chat system developed by Code-Projects as open source. Version 1.0 of Code-Projects Simple Chat System has a SQL injection vulnerability, which arises from the validations of the parameters type/length/business in the sendMessage.php file,...

6.5CVSS6.7AI score0.00011EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/27 8:30 a.m.1 views

CVE-2026-7103 code-projects Chat System MD5 Hash update_user.php weak hash

A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file updateuser.php of the component MD5 Hash Handler. This manipulation of the argument Password causes use of weak hash. The attack is possible to be carried out remotely. The attack's...

6.3CVSS4.2AI score0.00018EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/27 5:15 a.m.1 views

CVE-2026-7090 code-projects Chat System send_message.php cross site scripting

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/sendmessage.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public...

4.8CVSS3.1AI score0.00012EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/27 5:15 a.m.29 views

CVE-2026-7090 code-projects Chat System send_message.php cross site scripting

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/sendmessage.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public...

4.8CVSS0.00012EPSS
Exploits0References5
CVE
CVE
added 2026/04/27 5:15 a.m.8 views

CVE-2026-7090

CVE-2026-7090 affects code-projects Chat System 1.0 via /admin/send_message.php: the msg parameter is vulnerable to cross-site scripting. The issue arises from improper handling of the argument, enabling remote exploitation with a public exploit. No remediation details are provided in the availab...

4.8CVSS3.3AI score0.00012EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.2 views

Code-Projects Chat System 加密问题漏洞

Code-Projects Chat System is an open-source chat system developed by Code-Projects. Version 1.0 of the code-projects Chat System has a security vulnerability related to encryption. This vulnerability stems from the parameter “Password” in the MD5 Hash Handler component’s “updateuser.php” file,...

6.3CVSS5.8AI score0.00018EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51291

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00096EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-1912

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00197EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.4 views

PT-2025-30918 · Unknown · Code-Projects Public Chat Room

Name of the Vulnerable Software and Affected Versions: code-projects Public Chat Room version 1.0 Description: A critical issue exists in the send message.php file. Manipulation of the ID argument can lead to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to t...

8.8CVSS6.7AI score0.00205EPSS
Exploits1References10
Vulnrichment
Vulnrichment
added 2025/07/13 1:32 a.m.2 views

CVE-2025-7511 code-projects Chat System update_account.php sql injection

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/updateaccount.php. The manipulation of the argument musername leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.8AI score0.00138EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.0 views

PT-2025-29354 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue exists in the processing of the /user/update account.php file. Manipulation of the musername argument can lead to SQL injection. The attack can be initiated remotely. The...

6.5CVSS6.9AI score0.00138EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/07/10 6:24 p.m.3 views

CVE-2025-7188

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS7.7AI score0.00197EPSS
Exploits1References1
OSV
OSV
added 2025/07/08 6:15 p.m.3 views

CVE-2025-7188

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS5.8AI score0.00197EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/07/08 6:2 p.m.8 views

CVE-2025-7189 code-projects Chat System send_message.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/sendmessage.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit...

6.5CVSS0.00197EPSS
Exploits1References5
OSV
OSV
added 2025/07/08 5:16 p.m.1 views

CVE-2025-7187

A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetchmember.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

8.8CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/07/08 5:2 p.m.7 views

CVE-2025-7187 code-projects Chat System fetch_member.php sql injection

A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetchmember.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS0.00197EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/07/08 4:32 p.m.2 views

CVE-2025-7186 code-projects Chat System fetch_chat.php sql injection

A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetchchat.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

6.5CVSS7.6AI score0.00197EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.0 views

PT-2025-28641 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue was found in the code-projects Chat System. The problem affects an unknown functionality of the file "/user/addmember.php". The manipulation of the ID argument leads to SQL...

8.8CVSS6.8AI score0.00197EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.0 views

PT-2025-28500 · Code Projects · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue affects the processing of the file /user/fetch chat.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

8.8CVSS6.8AI score0.00197EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.1 views

PT-2025-28652 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting some unknown functionality of the file /user/send message.php. The manipulation of the msg argument leads to SQL...

8.8CVSS6.8AI score0.00197EPSS
Exploits1References8
Rows per page
Query Builder