CVE-2018-17232

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...

Slack ArchiveBot SQL Injection Vulnerability

docmarionum1 Slack ArchiveBot aka slack-archive-bot is a tool for archiving messages and providing search capabilities. A SQL injection vulnerability exists in the archivebot.py file in versions prior to docmarionum1 Slack ArchiveBot 2018-09-19. A remote attacker can exploit the vulnerability by...