Chat System

CVE-2026-7090 Apr 27, 05:15 LOW POC Monitor

Stored cross-site scripting (XSS) in code-projects Chat System 1.0 allows high-privilege remote attackers to inject malicious scripts via the msg parameter in /admin/send_message.php, affecting the Chat Interface component. The vulnerability requires admin-level authentication and user interaction (viewing the crafted message), but publicly available exploit code exists and the issue is actively being leveraged. With a CVSS score of 2.4, the impact is limited to integrity violations with no confidentiality or availability loss, but the presence of public POC and active exploitation elevates practical risk despite low severity metrics.

CVE-2025-7511 Jul 13, 02:15 LOW POC Monitor

SQL injection in Chat System 1.0 allows authenticated remote attackers with low privileges to manipulate backend database queries via the musername parameter in /user/update_account.php. Successful exploitation leads to limited confidentiality, integrity, and availability impact. A public exploit is available, but no active exploitation has been confirmed.

CVE-2025-7189 Jul 08, 18:15 LOW POC Monitor

SQL injection in Chat System 1.0 allows remote attackers to manipulate database queries via the 'msg' parameter of /user/send_message.php. Publicly available exploit code exists, but no active exploitation has been confirmed. The application is a low-footprint, unsupported project, limiting real-world exposure.

CVE-2025-7188 Jul 08, 18:15 LOW POC Monitor

SQL injection in code-projects Chat System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in /user/addmember.php. Public exploit code is available, but EPSS indicates low exploitation probability and no active exploitation has been confirmed.

CVE-2025-7187 Jul 08, 17:16 LOW POC Monitor

SQL injection in Chat System 1.0 through the ID parameter of /user/fetch_member.php allows remote authenticated attackers with low privileges to extract or manipulate limited data from the application's database. Public exploit code is available, but no active exploitation has been reported and the EPSS probability is very low.

CVE-2025-7186 Jul 08, 17:16 LOW POC Monitor

SQL injection in code-projects Chat System 1.0 allows authenticated remote attackers to manipulate backend database queries via the ID parameter of /user/fetch_chat.php. Public exploit code is available, and the vulnerability is rated critically by the reporter, but the CVSS 4.0 base impact is limited (low confidentiality, integrity, and availability) and EP

CVE-2025-5881 Jun 09, 14:15 LOW POC Monitor

SQL injection in code-projects Chat System 1.0 allows remote authenticated attackers to manipulate the cid parameter in /user/confirm_password.php, potentially leading to data leakage or modification. A public exploit exists, but no active exploitation has been confirmed.

CVE-2025-0967 Feb 02, 16:15 MEDIUM POC This Month

A vulnerability was found in code-projects Chat System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-0882 Jan 30, 21:15 MEDIUM POC This Month

A vulnerability was found in code-projects Chat System up to 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-0531 Jan 17, 16:15 MEDIUM POC This Month

A vulnerability was found in code-projects Chat System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-0172 Jan 02, 16:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-0171 Jan 02, 15:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2024-13036 Dec 30, 03:15 MEDIUM This Month

A vulnerability was found in code-projects Chat System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2024-13035 Dec 30, 03:15 MEDIUM This Month

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2024-13034 Dec 30, 02:15 MEDIUM This Month

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2024-13033 Dec 30, 02:15 MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2024-13020 Dec 29, 19:15 MEDIUM This Month

A vulnerability classified as critical was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2024-13019 Dec 29, 19:15 MEDIUM This Month

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.