Lucene search
+L

1378 matches found

Cvelist
Cvelist
•added 2022/06/01 5:58 p.m.•34 views

CVE-2022-31971

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/viewresponse&id=...

7.7AI score0.01008EPSS
SaveExploits1References1
CVE
CVE
•added 2022/06/01 5:58 p.m.•77 views

CVE-2022-31971

CVE-2022-31971 affects ChatBot App with Suggestion v1.0. The vulnerability is a SQL Injection in the admin view, exposed via the URL parameter /simple_chat_bot/admin/?page=responses/view_response&id=, where user-controlled input can influence SQL queries. Root cause described across connected sou...

7.2CVSS7.3AI score0.01008EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•3 views

CVE-2022-31970: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...

7.2CVSS7.2AI score0.01036EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•6 views

CVE-2022-31966: Undefined Security Weakness

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simplechatbot/classes/Master.php?f=deleteimg...

6.5CVSS6.7AI score0.00976EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•7 views

CVE-2022-31969: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=user/manageuser&id=...

9.8CVSS8.3AI score0.01137EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/01 12:00 a.m.•8 views

CVE-2022-31971: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/viewresponse&id=...

7.2CVSS7.2AI score0.01008EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/05/26 12:00 a.m.•69 views

ChatBot Application with a Suggestion Feature SQL Injection Vulnerability

ChatBot Application with a Suggestion FeatureA ChatBot application with a suggestion feature. chatBot Application with a Suggestion Feature v1.0 is vulnerable to a SQL injection vulnerability in /simple chatbot/classes/Master.php?f=deleteresponse, id is missing validation for external input SQL...

6.5CVSS3AI score0.00969EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2022/05/24 2:15 p.m.•16 views

CVE-2022-30464

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

5.4CVSS5.8AI score0.00495EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/24 2:15 p.m.•29 views

CVE-2022-30459

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

8.8CVSS5.8AI score0.00969EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/24 2:15 p.m.•37 views

CVE-2022-30464

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

5.4CVSS0.00495EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/24 2:15 p.m.•32 views

CVE-2022-30459

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

8.8CVSS0.00969EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/24 2:15 p.m.•21 views

Sql injection

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

6.5CVSS9AI score0.00969EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2022/05/24 2:15 p.m.•10 views

CVE-2022-30464

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

5.4CVSS6.1AI score0.00495EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/24 2:15 p.m.•7 views

CVE-2022-30459

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

8.8CVSS7.4AI score0.00969EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/24 2:15 p.m.•26 views

Cross site scripting

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

3.5CVSS5.2AI score0.00495EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/24 1:34 p.m.•41 views

CVE-2022-30459

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

9.3AI score0.00969EPSS
SaveExploits1References1
CVE
CVE
•added 2022/05/24 1:34 p.m.•75 views

CVE-2022-30459

CVE-2022-30459 affects the ChatBot App with Suggestion in PHP/OOP v1.0. The vulnerability is a SQL injection in the Master.php endpoint when the parameter f is set to delete_response and id is supplied, due to insufficient input validation. This can allow manipulation of the underlying database, ...

8.8CVSS9AI score0.00969EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/24 1:33 p.m.•43 views

CVE-2022-30464

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting XSS via /simplechatbot/classes/Master.php?f=saveresponse...

5.5AI score0.00495EPSS
SaveExploits1References1
CVE
CVE
•added 2022/05/24 1:33 p.m.•72 views

CVE-2022-30464

CVE-2022-30464 concerns a Cross Site Scripting (XSS) vulnerability in the ChatBot App with Suggestion in PHP/OOP v1.0. The issue is triggered via the endpoint /simple_chat_bot/classes/Master.php?f=save_response, where user-supplied input appears to be processed without proper sanitization, enabli...

5.4CVSS5.2AI score0.00495EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•6 views

CVE-2022-30459: Improper Neutralization of Special Elements used in an SQL Command

ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simplechatbot/classes/Master.php?f=deleteresponse, id...

8.8CVSS7.9AI score0.00969EPSS
SaveExploits1References2
Rows per page
Query Builder