Chatengine vulnerabilities

5 known vulnerabilities in Chatengine from Chatengine Project. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Chatengine: Improper Neutralization of Input During Web Page Generation

  CVE-2023-30321Jul 6, 2023Chatengine Project

  Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

• 9.0 Critical severity

  Chatengine: Improper Neutralization of Input During Web Page Generation

  CVE-2023-30320Jul 6, 2023Chatengine Project

  Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

• 9.6 Critical severity

  Chatengine: Improper Neutralization of Input During Web Page Generation

  CVE-2023-30319Jul 6, 2023Chatengine Project

  Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.

• 7.5 High severity

  Chatengine: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-30325Jul 6, 2023Chatengine Project

  SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information.

• 7.5 High severity

  Chatengine: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-30323Jul 6, 2023Chatengine Project

  SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information.