Chatengine Project - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2023-07-06.

Products

• Chatengine - 7 CVEs

Newest CVEs of Chatengine Project

• CVE-2023-30321 - CVSS 9 (critical), 2023-07-06: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit…
• CVE-2023-30320 - CVSS 9 (critical), 2023-07-06: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit…
• CVE-2023-30319 - CVSS 9.6 (critical), 2023-07-06: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit…
• CVE-2023-30326 - CVSS 6.1 (medium), 2023-07-06: Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit…
• CVE-2023-30325 - CVSS 7.5 (high), 2023-07-06: SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive…
• CVE-2023-30323 - CVSS 7.5 (high), 2023-07-06: SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information.
• CVE-2023-30322 - CVSS 5.4 (medium), 2023-07-06: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute…