Chaincity

chaincity

Vendor: Bugfinder • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-3795

1Bugfinder

1Chaincity

Jun 17, 2026

Jul 20, 2023

N/A· v4

9.8 CRITICAL· v3

5.2 MEDIUM· v2

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /property of the component GET Parameter Handler. The manipulation of the argument name leads to sql injection. The associated identifier of this vulnerability is VDB-235063. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less

CVE-2023-3794

1Bugfinder

1Chaincity

Jun 17, 2026

Jul 20, 2023

N/A· v4

6.1 MEDIUM· v3

4.0 MEDIUM· v2

A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argument subject leads to cross site scripting. It is possible to launch the attack remotely. VDB-235062 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less