Lucene search
+L

4 matches found

NVD
NVD
•added 2018/09/20 6:29 a.m.•17 views

CVE-2018-17232

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...

9.8CVSS10AI score0.01748EPSS
SaveExploits0References1
CVE
CVE
•added 2018/09/20 6:00 a.m.•41 views

CVE-2018-17232

The CVE-2018-17232 entry concerns the docmarionum1 Slack ArchiveBot (aka slack-archive-bot). A SQL injection vulnerability exists in archivebot.py where the text parameter is passed to cursor.execute(), enabling remote attackers to execute arbitrary SQL commands. Affected versions are prior to 20...

9.8CVSS9.9AI score0.01748EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/09/20 6:00 a.m.•23 views

CVE-2018-17232

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...

10AI score0.01748EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/20 12:00 a.m.•7 views

CVE-2018-17232: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...

9.8CVSS8.6AI score0.01748EPSS
SaveExploits0References2
Rows per page
Query Builder