CVE-2024-13019

Summary

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /admin/update_room.php of the component Chat Room Page. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely.

Affected Software

Weaknesses

• CWE-79: Cross Site Scripting
• CWE-94: Code Injection

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://code-projects.org/chat-system-using-php-source-code/

References

• https://vuldb.com/?id.289710
• https://vuldb.com/?ctiid.289710
• https://vuldb.com/?submit.470599
• https://code-projects.org/

• ←Previous
• Next→