CVE 6.9 MEDIUM

code-projects Simple ChatBox Endpoint insert.php sql injection_CVE-2026-6161

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipulation of the argument msg can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Basic Information

ID CVE-2026-6161
Source VulDB
Published Apr 13, 2026 at 04:45

Affected Product

Vendor code-projects
Product Simple ChatBox
Version 1.0
Affected Versions code-projects Simple ChatBox 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.