ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in ChatEngine, which stems from a cross-site scripting attack in the textMessage field of /src/chatbotapp/LoginServlet.java...

CVE-2023-30325: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information...

CVE-2023-30320: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code...