Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66587
HistoryMay 26, 2022 - 12:00 a.m.

ChatBot Application with a Suggestion Feature SQL Injection Vulnerability

2022-05-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
chatbot
suggestion feature
sql injection
vulnerability
external input
sql statements
database data
security

EPSS

0.001

Percentile

37.7%

ChatBot Application with a Suggestion FeatureA ChatBot application with a suggestion feature. chatBot Application with a Suggestion Feature v1.0 is vulnerable to a SQL injection vulnerability in /simple_ chat_bot/classes/Master.php?f=delete_response, id is missing validation for external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

37.7%

Related for CNVD-2022-66587