Get a Pentest and security assessment of your IT network.

2021-current

CVE-2015-1367 – SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote at

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1367

Reference (s):

  • BUGTRAQ:20150116 CatBot v0.4.2 (PHP) – SQL Injection Vulnerability
  • URL: http://www.securityfocus.com/archive/1/534490/100/0/threaded
  • FULLDISC:20150116 CatBot v0.4.2 (PHP) – SQL Injection Vulnerability
  • URL: http://seclists.org/fulldisclosure/2015/Jan/63
  • http://packetstormsecurity.com/files/129990/CatBot-0.4.2-SQL-Injection.html
Related posts
2021-current

CVE-2004-1715 - Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 all

2021-current

CVE-2014-8509 - The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) all

2021-current

CVE-2020-0298 - In Bluetooth, there is a possible control over Bluetooth enabled state du

2021-current

CVE-2020-14316 - A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances