PT-2025-7578

CVE-2025-25875

·

Published

2025-02-21

·

Updated

2025-02-21

Description by

CVSS 3.1
6.4
Medium
MetricsAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions ITSourcecode Simple ChatBox versions up to 1.0
Description A vulnerability was found in ITSourcecode Simple ChatBox, affecting unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data.
Recommendations For ITSourcecode Simple ChatBox versions up to 1.0, update to the latest version. Use strong and unique passwords. Consider implementing additional security measures such as input validation and sanitization to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the /message.php file until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾