Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:chat_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductChat System (84d4f234-24aa-5f4b-a1e2-943edafeb55a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7103 vulnerable 2026-06-08 08:07:05.392744 code-projects Chat System MD5 Hash update_user.php weak hash
LOW (3.7)
A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file update_user.php of the component MD5 Hash Handler. This manipulation of the argument Password causes use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-27T08:30:10.652Z
Updated: 2026-04-27T12:27:23.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7090 vulnerable 2026-06-08 08:07:05.378981 code-projects Chat System send_message.php cross site scripting
LOW (2.4)
A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_message.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-04-27T05:15:09.222Z
Updated: 2026-04-27T12:06:41.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7511 vulnerable 2026-06-08 07:45:17.571443 code-projects Chat System update_account.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/update_account.php. The manipulation of the argument musername leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-13T01:32:05.659Z
Updated: 2025-07-14T16:13:59.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7189 vulnerable 2026-06-08 07:43:18.106964 code-projects Chat System send_message.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/send_message.php. The manipulation of the argument msg leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T18:02:06.045Z
Updated: 2025-07-08T18:11:12.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7188 vulnerable 2026-06-08 07:43:18.106495 code-projects Chat System addmember.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T17:32:05.694Z
Updated: 2025-07-08T17:43:01.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7187 vulnerable 2026-06-08 07:43:18.105972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7186 vulnerable 2026-06-08 07:43:18.104896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5881 vulnerable 2026-06-08 07:37:25.970457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0967 vulnerable 2026-06-08 07:02:26.068265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0882 vulnerable 2026-06-08 07:02:25.750222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0531 vulnerable 2026-06-08 07:02:24.801314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0172 vulnerable 2026-06-08 07:00:29.850104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0171 vulnerable 2026-06-08 07:00:29.848800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13036 vulnerable 2026-06-08 06:25:36.557980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13035 vulnerable 2026-06-08 06:25:36.557378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13034 vulnerable 2026-06-08 06:25:36.556680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13033 vulnerable 2026-06-08 06:25:36.555907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13020 vulnerable 2026-06-08 06:25:36.532481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13019 vulnerable 2026-06-08 06:25:36.530812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.