PT-2022-21006

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows for SQL Injection via the "/simple chat bot/admin/?page=responses/manage response&id=" API endpoint, where an attacker can manipulate the id variable to inject malicious SQL...

CVE-2022-31971: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/viewresponse&id=...

PT-2022-21007

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/simple chat bot/admin/?page=responses/view response&id=" API endpoint. Specifically, the id variable is vulnerable to...

PT-2022-21005

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/simple chat bot/admin/?page=user/manage user&id=" API endpoint. This allows for potential manipulation of database queries...

PT-2022-21004

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows deletion of any file via the /simple chat bot/classes/Master.php API endpoint with the f parameter set to delete img. Recommendations For ChatBot App with Suggestion version...

CVE-2022-31970: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...

CVE-2022-31966: Undefined Security Weakness

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simplechatbot/classes/Master.php?f=deleteimg...

CVE-2022-31969: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=user/manageuser&id=...

CVE-2022-30459: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

CVE-2022-30464: Improper Neutralization of Input During Web Page Generation

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...