critical9.8
CVE-2021-46427
An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php.
Impact
An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Chatbot Application Project | Simple Chatbot Application | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cxsecurity.com/issue/WLB-2022010092
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple%20ChatBot
- https://www.exploit-db.com/exploits/50673
- https://www.nu11secur1ty.com/2022/01/cve-2021-46427-sql-injection-bypass.html
- https://cxsecurity.com/issue/WLB-2022010092
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple%20ChatBot
- https://www.exploit-db.com/exploits/50673
- https://www.nu11secur1ty.com/2022/01/cve-2021-46427-sql-injection-bypass.html