CVE-2015-1367 – SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote at

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1367

Reference (s):

• BUGTRAQ:20150116 CatBot v0.4.2 (PHP) – SQL Injection Vulnerability
• URL: http://www.securityfocus.com/archive/1/534490/100/0/threaded
• FULLDISC:20150116 CatBot v0.4.2 (PHP) – SQL Injection Vulnerability
• URL: http://seclists.org/fulldisclosure/2015/Jan/63
• http://packetstormsecurity.com/files/129990/CatBot-0.4.2-SQL-Injection.html