Lucene search
K

3502 matches found

Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.4 views

PT-2025-3760 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical vulnerability was found in the code-projects Chat System. It affects an unknown function of the file /admin/deleteuser.php. The manipulation of the id argument leads to SQL...

7.5CVSS6.8AI score0.0043EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.5 views

PT-2025-3761 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting an unknown functionality of the file /admin/deleteroom.php. The manipulation of the id argument leads to SQL...

7.5CVSS6.9AI score0.0043EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.4 views

PT-2025-1992 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical issue has been found in the Seeker Profile Handler component, affecting some unknown processing of the file / parse/ call main search ajax.php. The manipulation of the argument...

7.5CVSS6.8AI score0.00544EPSS
Exploits1References11
CVE
CVE
added 2025/01/01 1:31 p.m.135 views

CVE-2025-0168

CVE-2025-0168 affects code-projects Job Recruitment 1.0. The vulnerability is in the file /_parse/_feedback_system.php, where manipulating the parameter person leads to a SQL injection . The issue is exploitable remotely, and the exploit has been disclosed publicly. Connected documents corroborat...

7.5CVSS6.8AI score0.00535EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/01/01 12:0 a.m.3 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from an incorrect manipulation of the parameter person that can lead to SQL injection...

7.5CVSS7AI score0.00535EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/12/30 2:31 a.m.14 views

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.5CVSS7.5AI score0.00393EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/12/30 2:31 a.m.14 views

CVE-2024-13035 code-projects Chat System update_user.php sql injection

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/updateuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.5CVSS0.00393EPSS
Exploits0References4
CVE
CVE
added 2024/12/30 2:31 a.m.50 views

CVE-2024-13035

CVE-2024-13035 affects code-projects Chat System 1.0. The vulnerability is a SQL injection in the /admin/update_user.php script caused by unsafely handling the id parameter (lack of input validation). Exploitation is possible remotely, and the exploit has been disclosed publicly per multiple sour...

9.8CVSS6.9AI score0.00393EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/30 2:0 a.m.10 views

CVE-2024-13034 code-projects Chat System update_user.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...

5.3CVSS5.9AI score0.0045EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/12/30 2:0 a.m.11 views

CVE-2024-13034 code-projects Chat System update_user.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be...

5.3CVSS0.0045EPSS
Exploits0References4
CVE
CVE
added 2024/12/30 2:0 a.m.57 views

CVE-2024-13034

The CVE-2024-13034 entry describes a cross-site scripting vulnerability in code-projects Chat System 1.0, affecting an unknown portion of /admin/update_user.php. The issue arises from improper handling of the name argument, enabling remote exploitation and with an exploit publicly disclosed. Conn...

7.6CVSS3.7AI score0.0045EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/30 1:31 a.m.11 views

CVE-2024-13033 code-projects Chat System chatroom.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS6.2AI score0.00293EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/12/30 1:31 a.m.17 views

CVE-2024-13033 code-projects Chat System chatroom.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS0.00293EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/12/30 12:0 a.m.3 views

PT-2024-17890 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A problematic issue has been found in the code-projects Chat System, affecting some unknown functionality of the file /admin/chatroom.php. The manipulation of the id argument leads to cross...

6.1CVSS4.2AI score0.00293EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/12/30 12:0 a.m.3 views

PT-2024-17891 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A problematic vulnerability was found in the code-projects Chat System, affecting an unknown part of the file /admin/update user.php. The manipulation of the name argument leads to cross-site...

7.6CVSS4.3AI score0.0045EPSS
Exploits0References8
OSV
OSV
added 2024/12/29 7:15 p.m.4 views

CVE-2024-13020

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS5.8AI score0.0038EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/12/29 7:0 p.m.10 views

CVE-2024-13020 code-projects Chat System chatroom.php sql injection

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been...

6.5CVSS7AI score0.0038EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/12/29 7:0 p.m.21 views

CVE-2024-13020 code-projects Chat System chatroom.php sql injection

A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/chatroom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been...

6.5CVSS0.0038EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/12/29 6:31 p.m.10 views

CVE-2024-13019 code-projects Chat System Chat Room Page update_room.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/updateroom.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack...

5.3CVSS6AI score0.00286EPSS
Exploits0References4
CVE
CVE
added 2024/12/29 6:31 p.m.49 views

CVE-2024-13019

CVE-2024-13019 affects code-projects Chat System 1.0. The vulnerability arises in the /admin/update_room.php component, where the input parameter named name is not properly validated/escaped, enabling cross-site scripting. Exploitation is described as remote. Several sources corroborate the issue...

5.3CVSS3.8AI score0.00286EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder