Sql injection

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...

ChatBot App with Suggestion SQL注入漏洞

ChatBot App with Suggestion is a ChatBot application with suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to SQL injection, which originates from /simplechatbot/ admin/?page=user/manageuser&id=The page lacks validation for external input SQL...

ChatBot App with Suggestion 安全漏洞

ChatBot App with Suggestion is a ChatBot application with suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to an arbitrary file deletion vulnerability that originates in /simplechatbot/ classes/Master.php lacks valid validation for filenames, whi...

CVE-2022-31966

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simplechatbot/classes/Master.php?f=deleteimg...

CVE-2022-31969

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=user/manageuser&id=...

CVE-2022-31970

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...

CVE-2022-31970

CVE-2022-31970 describes a SQL injection vulnerability in ChatBot App with Suggestion v1.0. The issue affects the admin interface at /simple_chat_bot/admin/?page=responses/manage_response&id= where external input is not validated, allowing an attacker to inject SQL statements. Public sources (NVD...

CVE-2022-31971

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/viewresponse&id=...

CVE-2022-31971

CVE-2022-31971 affects ChatBot App with Suggestion v1.0. The vulnerability is a SQL Injection in the admin view, exposed via the URL parameter /simple_chat_bot/admin/?page=responses/view_response&id=, where user-controlled input can influence SQL queries. Root cause described across connected sou...

PT-2022-21006

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows for SQL Injection via the "/simple chat bot/admin/?page=responses/manage response&id=" API endpoint, where an attacker can manipulate the id variable to inject malicious SQL...

CVE-2022-31969: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=user/manageuser&id=...

PT-2022-21007

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/simple chat bot/admin/?page=responses/view response&id=" API endpoint. Specifically, the id variable is vulnerable to...

PT-2022-21005

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/simple chat bot/admin/?page=user/manage user&id=" API endpoint. This allows for potential manipulation of database queries...

PT-2022-21004

Name of the Vulnerable Software and Affected Versions ChatBot App with Suggestion version 1.0 Description The issue allows deletion of any file via the /simple chat bot/classes/Master.php API endpoint with the f parameter set to delete img. Recommendations For ChatBot App with Suggestion version...

CVE-2022-31966: Undefined Security Weakness

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simplechatbot/classes/Master.php?f=deleteimg...

CVE-2022-31971: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/viewresponse&id=...

CVE-2022-31970: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...

CVE-2022-30459

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

CVE-2022-30464

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

Cross site scripting

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...