CVE-2021-46428

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 ( and previous versions via the bot_avatar parameter in SystemSettings.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-01-27

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Simple Chatbot Application (Simple Chatbot Application Project)

References

• https://cxsecurity.com/issue/WLB-2022010093
• https://www.exploit-db.com/exploits/50672