CatBot SQL Injection Vulnerability

CatBot is a chatbot software based on HTML, PHP and MySQL. A SQL injection vulnerability exists in the CatBot 'index.php' script. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the 'lastcatbot' parameter...

CVE-2015-1367

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...

Sql injection

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...

PT-2015-5242

Name of the Vulnerable Software and Affected Versions CatBot version 0.4.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lastcatbot parameter in the "index.php" endpoint. Recommendations For CatBot version 0.4.2, consider restricting...

CVE-2015-1367: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter...