CVE:CVE-2022-31971
CNNVD:CNNVD-202206-166
ChatBot App with Suggestion是Carlo Montero个人开发者的一个带有建议功能的 ChatBot 应用程序。
ChatBot App with Suggestion v1.0 存在安全漏洞，攻击者利用该漏洞可通过/simple_chat_bot/admin/?page=responses/view_response&id=进行SQL注入攻击。
solution:Upgrade chatbot_app_with_suggestion_project chatbot_app_with_suggestion to a higher version than 1.0,and avoid the version 1.0