3 matches found
CVE-2018-17232
SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...
CVE-2018-17232
The CVE-2018-17232 entry concerns the docmarionum1 Slack ArchiveBot (aka slack-archive-bot). A SQL injection vulnerability exists in archivebot.py where the text parameter is passed to cursor.execute(), enabling remote attackers to execute arbitrary SQL commands. Affected versions are prior to 20...
CVE-2018-17232
SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...