CVE-2015-1367

Summary of CVE-2015-1367 (CatBot 0.4.2): An SQL injection in the CatBot web app’s index.php via the lastcatbot parameter allows remote attackers to execute arbitrary SQL commands. The root cause is unsanitized input passed to SQL queries, enabling data exposure or modification. Affected software/...