Lucene search
+L

27 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/21 12:00 a.m.•4 views

CVE-2025-25875: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data...

6.4CVSS5.5AI score0.00376EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/21 12:00 a.m.•618 views

CVE-2025-25875

A SQL injection vulnerability exists in ITSourcecode Simple ChatBox version 1.0 and earlier versions. The flaw originates from unknown code within the /message.php file, which could allow an attacker to obtain sensitive data . Remediation involves updating to the latest version, using strong/uniq...

6.4CVSS7.3AI score0.00376EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/02/21 12:00 a.m.•56 views

CVE-2025-25877

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data...

0.00285EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/21 12:00 a.m.•4 views

CVE-2025-25876: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data...

7.2CVSS5.5AI score0.00475EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/21 12:00 a.m.•91 views

CVE-2025-25876

A vulnerability exists in ITSourcecode Simple ChatBox version 1.0 and earlier versions, specifically within the unknown code of the /delete.php file. This flaw allows an attacker to perform an SQL injection to obtain sensitive data . As of the current reports, no patched version has been released...

7.2CVSS7.3AI score0.00475EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2025/02/21 12:00 a.m.•99 views

CVE-2025-25877

A vulnerability exists in ITSourcecode Simple ChatBox versions up to 1.0 . The flaw affects unknown code within the /admin.php file, where an attacker can perform an SQL injection to obtain sensitive data. As a temporary workaround, users should restrict access to the /admin.php file and avoid us...

3.8CVSS7.3AI score0.00285EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2025/02/21 12:00 a.m.•93 views

CVE-2025-25878

A vulnerability exists in ITSourcecode Simple ChatBox versions up to 1.0 , specifically affecting unknown code within the /del.php file. The root cause is an SQL injection vulnerability (CWE-89 ), which could allow an attacker to obtain sensitive data . As a temporary workaround, it is recommende...

3.8CVSS7.3AI score0.00285EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder