3 matches found
Sql injection
SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...
CVE-2015-1367
SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...
CVE-2015-1367
Summary of CVE-2015-1367 (CatBot 0.4.2): An SQL injection in the CatBot web app’s index.php via the lastcatbot parameter allows remote attackers to execute arbitrary SQL commands. The root cause is unsanitized input passed to SQL queries, enabling data exposure or modification. Affected software/...