Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_chatbox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Chatbox (8d4f5f6d-e748-5e1a-9014-44b470ecd1d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6161 vulnerable 2026-06-08 08:07:04.511842 code-projects Simple ChatBox Endpoint insert.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipulation of the argument msg can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-13T04:45:13.164Z
Updated: 2026-04-13T19:15:07.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6160 vulnerable 2026-06-08 08:07:04.511427 code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure
MEDIUM (5.3)
A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposure. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Published: 2026-04-13T04:30:22.947Z
Updated: 2026-04-14T16:29:48.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6159 vulnerable 2026-06-08 08:07:04.510946 code-projects Simple ChatBox Endpoint insert.php cross site scripting
MEDIUM (4.3)
A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown functionality of the file /chatbox/insert.php of the component Endpoint. Such manipulation of the argument msg leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Published: 2026-04-13T04:15:25.599Z
Updated: 2026-04-13T13:17:52.323Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.