chatengine project records

7 published records for vendor chatengine project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2023-30319No exploit	Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f8chatengine project · chatengine · CWE-79 pre-auth RCE XSS	Critical9.6	—	0.9%	Jul 6, 2023
36Monitor	CVE-2023-30320No exploit	Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59fchatengine project · chatengine · CWE-79 RCE XSS	Critical9.0	—	0.9%	Jul 6, 2023
36Monitor	CVE-2023-30321No exploit	Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad5chatengine project · chatengine · CWE-79 RCE XSS	Critical9.0	—	0.9%	Jul 6, 2023
30Monitor	CVE-2023-30323No exploit	SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitchatengine project · chatengine · CWE-89 Pre-auth SQL injection	High7.5	—	0.6%	Jul 6, 2023
30Monitor	CVE-2023-30325No exploit	SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gaichatengine project · chatengine · CWE-89 Pre-auth SQL injection	High7.5	—	0.6%	Jul 6, 2023
24Monitor	CVE-2023-30326No exploit	Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59chatengine project · chatengine · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 6, 2023
21Monitor	CVE-2023-30322No exploit	Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers tchatengine project · chatengine · CWE-79 RCE XSS	Medium5.4	—	0.4%	Jul 6, 2023

CVE-2023-30319
38Monitor
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f8
CriticalCVSS 9.6No exploitEPSS 1%
- pre-auth RCE
- XSS
chatengine project · chatengineJul 6, 2023
CVE-2023-30320
36Monitor
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f
CriticalCVSS 9.0No exploitEPSS 1%
- RCE
- XSS
chatengine project · chatengineJul 6, 2023
CVE-2023-30321
36Monitor
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad5
CriticalCVSS 9.0No exploitEPSS 1%
- RCE
- XSS
chatengine project · chatengineJul 6, 2023
CVE-2023-30323
30Monitor
SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensit
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SQL injection
chatengine project · chatengineJul 6, 2023
CVE-2023-30325
30Monitor
SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gai
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SQL injection
chatengine project · chatengineJul 6, 2023
CVE-2023-30326
24Monitor
Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
chatengine project · chatengineJul 6, 2023
CVE-2023-30322
21Monitor
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers t
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
chatengine project · chatengineJul 6, 2023