27 matches found
CVE-2025-25875: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data...
CVE-2025-25875
A SQL injection vulnerability exists in ITSourcecode Simple ChatBox version 1.0 and earlier versions. The flaw originates from unknown code within the /message.php file, which could allow an attacker to obtain sensitive data . Remediation involves updating to the latest version, using strong/uniq...
CVE-2025-25877
A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data...
CVE-2025-25876: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data...
CVE-2025-25876
A vulnerability exists in ITSourcecode Simple ChatBox version 1.0 and earlier versions, specifically within the unknown code of the /delete.php file. This flaw allows an attacker to perform an SQL injection to obtain sensitive data . As of the current reports, no patched version has been released...
CVE-2025-25877
A vulnerability exists in ITSourcecode Simple ChatBox versions up to 1.0 . The flaw affects unknown code within the /admin.php file, where an attacker can perform an SQL injection to obtain sensitive data. As a temporary workaround, users should restrict access to the /admin.php file and avoid us...
CVE-2025-25878
A vulnerability exists in ITSourcecode Simple ChatBox versions up to 1.0 , specifically affecting unknown code within the /del.php file. The root cause is an SQL injection vulnerability (CWE-89 ), which could allow an attacker to obtain sensitive data . As a temporary workaround, it is recommende...