CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

158 matches found

CVE•added 2026/04/13 4:15 a.m.•13 views

CVE-2026-6159

CVE-2026-6159 affects code-projects Simple ChatBox up to version 1.0. The vulnerability is in the Endpoint component’s file /chatbox/insert.php where manipulating the msg parameter leads to a cross-site scripting (XSS) issue. It can be triggered remotely and exploitation has been publicly disclos...

5.3CVSS4.1AI score0.00269EPSS

Exploits0References5

CNNVD•added 2026/04/13 12:0 a.m.•5 views

Code-Projects Simple ChatBox 安全漏洞

Code-Projects Simple ChatBox is a simple chat box system developed under the open source initiative of Code-Projects. Version 1.0 of Code-Projects Simple ChatBox contains a security vulnerability, which stems from incorrect handling of the file chatbox.sql. This vulnerability may lead to the...

6.9CVSS6.1AI score0.00308EPSS

Exploits0References6

Positive Technologies•added 2026/04/13 12:0 a.m.•8 views

PT-2026-32261

A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox PHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposure. It is possible to initiate the attack remotely...

6.9CVSS5.7AI score0.00308EPSS

Exploits0References6

CNNVD•added 2026/04/13 12:0 a.m.•5 views

Code-Projects Simple ChatBox SQL注入漏洞

Code-Projects Simple ChatBox is a simple chat box system developed by Code-Projects as open source. Versions of Code-Projects Simple ChatBox 1.0 and earlier contained a SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the msg parameter in the...

7.5CVSS7.2AI score0.00254EPSS

Exploits0References5

CNNVD•added 2026/04/13 12:0 a.m.•8 views

Code-Projects Simple ChatBox 代码注入漏洞

Code-Projects Simple ChatBox is a simple chat box system developed by Code-Projects as open source. Versions of Code-Projects Simple ChatBox 1.0 and earlier contained a code injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter “msg” in the file...

5.3CVSS5.7AI score0.00269EPSS

Exploits0References5

Positive Technologies•added 2026/04/13 12:0 a.m.•12 views

PT-2026-32260

A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown functionality of the file /chatbox/insert.php of the component Endpoint. Such manipulation of the argument msg leads to cross site scripting. The attack may be performed from...

5.3CVSS4.1AI score0.00269EPSS

Exploits0References6

Positive Technologies•added 2026/04/13 12:0 a.m.•9 views

PT-2026-32262

A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipulation of the argument msg can lead to sql injection. It is possible to launch the attack remotely. The exploit has...

7.5CVSS6.9AI score0.00254EPSS

Exploits0References6

CNNVD•added 2026/04/12 12:0 a.m.•7 views

Chatbox 操作系统命令注入漏洞

Chatbox is a chat software developed by Shafqat Hasan. Versions of Chatbox 1.20.0 and earlier contained a vulnerability related to operating system command injection. This vulnerability stemmed from incorrect handling of the parameters args and env in the file src/main/mcp/ipc-stdio-transport.ts,...

7.5CVSS7.1AI score0.01368EPSS

Exploits0References6