CVE-2018-19290

Budabot 0.6–4.0 is affected by CVE-2018-19290 due to lax syntax validation in the HELPBOT_MODULE, which enables a remote command-injection against the PHP daemon. The vulnerability affects the affected module code paths: calc.php (versions prior to 3.0) and HelpbotController.class.php (3.0 and ab...

Budabot 4.0 Denial Of Service Vulnerability

Exploit for php platform in category dos / poc 4.0 Tested on: 4.0 CVE: CVE-2018-19290 1. Description In modules/HELPBOTMODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in...

Budabot 4.0 Denial Of Service

4.0 Tested on: 4.0 CVE: CVE-2018-19290 1. Description In modules/HELPBOTMODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in a denial of service or possibly unspecified...