chatengine project kayıtları

chatengine project üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
38İzleyin	CVE-2023-30319İstismar yok	Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f8chatengine project · chatengine · CWE-79 pre-auth RCE XSS	Kritik9,6	—	%0,9	6 Tem 2023
36İzleyin	CVE-2023-30320İstismar yok	Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59fchatengine project · chatengine · CWE-79 RCE XSS	Kritik9,0	—	%0,9	6 Tem 2023
36İzleyin	CVE-2023-30321İstismar yok	Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad5chatengine project · chatengine · CWE-79 RCE XSS	Kritik9,0	—	%0,9	6 Tem 2023
30İzleyin	CVE-2023-30323İstismar yok	SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitchatengine project · chatengine · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,6	6 Tem 2023
30İzleyin	CVE-2023-30325İstismar yok	SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gaichatengine project · chatengine · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,6	6 Tem 2023
24İzleyin	CVE-2023-30326İstismar yok	Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59chatengine project · chatengine · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	6 Tem 2023
21İzleyin	CVE-2023-30322İstismar yok	Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers tchatengine project · chatengine · CWE-79 RCE XSS	Orta5,4	—	%0,4	6 Tem 2023

CVE-2023-30319
38İzleyin
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f8
KritikCVSS 9,6İstismar yokEPSS %1
- pre-auth RCE
- XSS
chatengine project · chatengine6 Tem 2023
CVE-2023-30320
36İzleyin
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f
KritikCVSS 9,0İstismar yokEPSS %1
- RCE
- XSS
chatengine project · chatengine6 Tem 2023
CVE-2023-30321
36İzleyin
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad5
KritikCVSS 9,0İstismar yokEPSS %1
- RCE
- XSS
chatengine project · chatengine6 Tem 2023
CVE-2023-30323
30İzleyin
SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensit
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
chatengine project · chatengine6 Tem 2023
CVE-2023-30325
30İzleyin
SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gai
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
chatengine project · chatengine6 Tem 2023
CVE-2023-30326
24İzleyin
Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
chatengine project · chatengine6 Tem 2023
CVE-2023-30322
21İzleyin
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers t
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
chatengine project · chatengine6 Tem 2023