PT-2026-38629 · Unknown · Simple Chat System

Mickey-Ben · Published 2026-05-08 · Updated 2026-05-10 · CVE-2026-8125

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Simple Chat System version 1.0

Description An issue exists in the 'sendMessage.php' file where improper manipulation of argument type, length, or business parameter validity allows for SQL injection. This flaw can be exploited remotely.

Recommendations As a temporary workaround, restrict access to the 'sendMessage.php' file until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-8125

Affected Products

Simple Chat System

References · 9

• 🔥 https://github.com/MICHEY-Ben/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8125 · Security Note
• https://t.me/cveNotify/162653 · Telegram Post
• https://vuldb.com/submit/808679 · Note
• https://twitter.com/CVEnew/status/2053559143454089559 · Twitter Post
• https://code-projects.org · Note
• https://vuldb.com/vuln/361915/cti · Note
• https://vuldb.com/vuln/361915 · Note
• https://twitter.com/CVEarity/status/2052759350155059343 · Twitter Post