CVE-2026-6160CWE-200CWE-538

code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure

Medium · published April 13, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposure. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00510 · 42.6th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-538 · Insertion of Sensitive Information into Externally-Accessible File or Directory
Published
2026-04-13T04:30Z
EPSS history
Timeline
  • 13 APR 04:30Z
    code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure
    cvelistv5