Lucene search
+L

8 matches found

NVD
NVD
•added 2026/04/27 6:16 a.m.•27 views

CVE-2026-7090

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/sendmessage.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public...

4.8CVSS0.0035EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/27 5:15 a.m.•40 views

CVE-2026-7090

CVE-2026-7090 affects code-projects Chat System 1.0 via /admin/send_message.php: the msg parameter is vulnerable to cross-site scripting. The issue arises from improper handling of the argument, enabling remote exploitation with a public exploit. No remediation details are provided in the availab...

4.8CVSS3.3AI score0.0035EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/11/11 12:11 a.m.•15 views

CVE-2025-63710

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.5CVSS6.8AI score0.00147EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/10 3:15 p.m.•15 views

CVE-2025-63710

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.5CVSS5.9AI score0.00147EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/07/22 12:00 a.m.•19 views

Code-Projects Public Chat Room 代码注入漏洞

Code-Projects Public Chat Room is Code-Projects open source public chat room software. Code-Projects Public Chat Room version 1.0 suffers from a code injection vulnerability, which originates from a cross-site scripting attack due to incorrect manipulation of the chatmsg/yourname parameter in the...

5.4CVSS4.7AI score0.00334EPSS
SaveExploits1References7
OSV
OSV
•added 2024/12/09 2:15 p.m.•15 views

CVE-2024-54936

A Stored Cross-Site Scripting XSS vulnerability was found in /sendmessage.php of Kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the mymessage parameter...

5.4CVSS6AI score0.00406EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2004/02/03 12:00 a.m.•32 views

0verkill - little simple vulnerability.

0verkill - little simple vulnerability. I. Entry. Vulnerability is game 0verkill. There is some little bugs in clinet / server. II. Vulnerability details. a client: Vulnerability function is loadcfg, savecfg and maybe sendmessage. There is simple buffer overflow bugs: "in file client.c" void...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2004/02/02 12:00 a.m.•33 views

overkill.txt

0verkill - little simple vulnerability. I. Entry. Vulnerability is game 0verkill. There is some little bugs in clinet / server. II. Vulnerability details. a client: Vulnerability function is loadcfg, savecfg and maybe sendmessage. There is simple buffer overflow bugs: "in file client.c" void...

0.1AI score
SaveExploits0
Rows per page
Query Builder