| शीर्षक | code-projects Simple Chatbox PHP 1.0 Information Disclosure |
|---|
| विवरण | The Simple Chatbox in PHP v1.0 is vulnerable to Sensitive Information Disclosure due to an exposed SQL database backup file.
The application includes a database dump file (chatbox.sql) located within a publicly accessible directory inside the web root. Because the web server does not restrict access to .sql files, any unauthenticated user can directly access and download the database dump via HTTP.
The exposed file is accessible at:
http://localhost/SimpleChatbox_PHP/chatbox/database/chatbox.sql
The SQL dump file contains the complete database schema and stored application data, including chat messages, user-related data, and system structure. Since the file is stored in a web-accessible location without access controls, attackers can retrieve sensitive information without authentication. |
|---|
| स्रोत | ⚠️ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Simple%20Chatbox%20PHP%20Exposed%20Database%20Backup.md |
|---|
| उपयोगकर्ता | AhmadMarzook (UID 96211) |
|---|
| सबमिशन | 03/04/2026 08:41 PM (6 महीनों पहले) |
|---|
| संयम | 12/04/2026 08:11 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 357040 [code-projects Simple ChatBox 1.0 Endpoint chatbox.sql SimpleChatbox_PHP सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|