CVE-2026-6160: code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure

Published Apr 13, 2026

Updated

A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatboxPHP of the file chatbox.sql of the component Endpoint. Performing a manipulation results in file and directory information exposure. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Affected Software

1 affected component

Code-projects Simple ChatBox=1.0

Event History

Apr 13, 2026

CVE Published

via MITRE·04:30 AM

Data Sourced

via MITRE·04:30 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-6160?

The severity of CVE-2026-6160 is classified as medium with a score of 5.5.

What type of vulnerability is CVE-2026-6160?

CVE-2026-6160 is an information disclosure vulnerability affecting the Simple ChatBox software.

How can CVE-2026-6160 be exploited?

CVE-2026-6160 can be exploited remotely to expose file and directory information through manipulation of the SimpleChatbox_PHP function.

What software is impacted by CVE-2026-6160?

CVE-2026-6160 affects Code-projects Simple ChatBox version 1.0.

How do I fix CVE-2026-6160?

To fix CVE-2026-6160, you should update the Code-projects Simple ChatBox to a patched version addressing this vulnerability.