Chatbot Vulnerable to SQL Injection via Username
CVE-2024-28816

7.1HIGH

Key Information:

Vendor

a0196ab

Status
Student Information Chatbot
Vendor
CVE Published:
11 March 2024

What is CVE-2024-28816?

The Student Information Chatbot a0196ab contains a vulnerability that allows attackers to perform SQL injection through the login function in the index.php file. By manipulating the username input, unauthorized users can potentially access sensitive data or execute arbitrary SQL commands. This security flaw emphasizes the need for proper input validation and sanitation to safeguard against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/AaravRajSIngh/Chatbot/pull/10

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.