CVE-2026-6161

CWE-74CWE-89 — SQL Injection4 documents4 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 91.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Code-projects Simple Chatbox
Timeline
PublishedApr 13

Description

A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipulation of the argument msg can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-658j-rfvq-5wqq: A vulnerability was determined in code-projects Simple ChatBox up to 1↗2026-04-13
▶
CVEList
code-projects Simple ChatBox Endpoint insert.php sql injection↗2026-04-13
▶
VulDB
code-projects Simple ChatBox up to 1.0 Endpoint /chatbox/insert.php msg sql injection↗2026-04-12
▶
CVE-2026-6161 (MEDIUM CVSS 6.9) | A vulnerability was determined in c | cvebase.io