CVE-2024-13020

CVE-2024-13020 affects code-projects Chat System 1.0. The vulnerability is an SQL injection in the /admin/chatroom.php file triggered by manipulating the id parameter, with remote access possible and a public exploit. Root cause: insufficient input validation/filtering on id. Impact: potential da...

CVE-2024-13033

CVE-2024-13033 affects code-projects Chat System 1.0. The vulnerability lies in the file /admin/chatroom.php where manipulating the id argument triggers a cross-site scripting (XSS) flaw. The issue can be exploited remotely and, according to public disclosures, the exploit has been released. Mult...

CVE-2024-13034

The CVE-2024-13034 entry describes a cross-site scripting vulnerability in code-projects Chat System 1.0, affecting an unknown portion of /admin/update_user.php. The issue arises from improper handling of the name argument, enabling remote exploitation and with an exploit publicly disclosed. Conn...

CVE-2024-13019

CVE-2024-13019 affects code-projects Chat System 1.0. The vulnerability arises in the /admin/update_room.php component, where the input parameter named name is not properly validated/escaped, enabling cross-site scripting. Exploitation is described as remote. Several sources corroborate the issue...

CVE-2024-13035

CVE-2024-13035 affects code-projects Chat System 1.0. The vulnerability is a SQL injection in the /admin/update_user.php script caused by unsafely handling the id parameter (lack of input validation). Exploitation is possible remotely, and the exploit has been disclosed publicly per multiple sour...