Chatengine Project vulnerabilities
We track 5 vulnerabilities in Chatengine Project products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 6, 2023.
Latest Chatengine Project vulnerabilities
- 9.0 Critical severity
Chatengine: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.
- 9.0 Critical severity
Chatengine: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.
- 9.6 Critical severity
Chatengine: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.
- 7.5 High severity
Chatengine: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information.
- 7.5 High severity
Chatengine: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information.