Description
A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposure. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Simple ChatBox | 1.0 | — |
References
- VDB-357040 | code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure vdb-entry technical-description
- VDB-357040 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #796696 | code-projects Simple Chatbox PHP 1.0 Information Disclosure third-party-advisory
- https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Simple%20Chatbox%20PHP%20Exposed%20Database%20Backup.md exploit
- https://code-projects.org/ product