PT-2026-32261 · Unknown · Simple Chatbox

Ahmadmarzook · Published 2026-04-13 · Updated 2026-04-13 · CVE-2026-6160

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple ChatBox version 1.0

Description A flaw in the SimpleChatbox PHP() function within the chatbox.sql file of the Endpoint component allows for remote manipulation. This can lead to the exposure of sensitive file and directory information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-538

CWE-200

Related Identifiers

CVE-2026-6160

Affected Products

Simple Chatbox

References · 7

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Simple%20Chatbox%20PHP%20Exposed%20Database%20Backup.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6160 · Security Note
• https://twitter.com/VulmonFeeds/status/2043622100011745422 · Twitter Post
• https://vuldb.com/submit/796696 · Note
• https://vuldb.com/vuln/357040 · Note
• https://vuldb.com/vuln/357040/cti · Note
• https://code-projects.org · Note