CVE-2022-31966

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simplechatbot/classes/Master.php?f=deleteimg...

CVE-2022-31966

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simplechatbot/classes/Master.php?f=deleteimg...

CVE-2022-31966

ChatBot App with Suggestion v1.0 is affected by CVE-2022-31966. Affected component: /simple_chat_bot/classes/Master.php. Root cause: lack of filename validation in the delete_img function, enabling arbitrary file deletion through the parameter f=delete_img. Impact: arbitrary deletion of files as ...