13 matches found
CVE-2024-13036
A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/updateroom.php. The manipulation of the argument id/name/password leads to sql injection. The attack may be initiated remotely. The exploit has been...
Chat System update_room.php File SQL Injection Vulnerability
Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from insufficient input validation of the id/name/password parameters in the /admin/updateroom.php file. An attacker can use this vulnerability to execute arbitrary SQL commands to obtain sensitiv...
Simple Chat System 注入漏洞
Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from insufficient input validation of the id/name/password parameters in the /admin/updateroom.php file. An attacker can use this vulnerability to execute arbitrary SQL commands to obtain sensitiv...
Chat System update_room.php file cross-site scripting vulnerability
Chat System is a chat system. Chat System suffers from a cross-site scripting vulnerability that stems from the lack of sufficient validation and escaping of the name parameter input in the /admin/updateroom.php file. The vulnerability can be exploited to perform cross-site scripting attacks by...
CVE-2024-13019
A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/updateroom.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack...
CVE-2024-13019
A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/updateroom.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack...
CVE-2024-13019 code-projects Chat System Chat Room Page update_room.php cross site scripting
A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/updateroom.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack...
CVE-2024-13019
CVE-2024-13019 affects code-projects Chat System 1.0. The vulnerability arises in the /admin/update_room.php component, where the input parameter named name is not properly validated/escaped, enabling cross-site scripting. Exploitation is described as remote. Several sources corroborate the issue...
Simple Chat System 代码注入漏洞
Chat System is a chat system. Chat System suffers from a cross-site scripting vulnerability that stems from the lack of sufficient validation and escaping of the name parameter input in the /admin/updateroom.php file. The vulnerability can be exploited to perform cross-site scripting attacks by...
PT-2024-17877 · Unknown · Code-Projects Chat System
Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A vulnerability has been found in the code-projects Chat System. The issue affects an unknown function of the file /admin/update room.php of the component Chat Room Page. The manipulation of...
CVE-2024-2932
A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unknown function of the file admin/updateroom.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Online Chatting System 1.0 SQL注入漏洞
Online Chatting System is an online chatting system. A SQL injection vulnerability exists in Online Chatting System version 1.0, which originates from the parameter id of the file admin/updateroom.php that lacks validation of externally entered SQL statements. An attacker can exploit this...
PT-2024-22860 · Sourcecodester · Sourcecodester Online Chatting System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Chatting System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Chatting System. The issue affects an unknown function of the file admin/update room.php. The manipulation of...