cve/2015/CVE-2015-1367.md

CVE-2015-1367

Description

SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter.

POC

Reference

• http://packetstormsecurity.com/files/129990/CatBot-0.4.2-SQL-Injection.html
• http://seclists.org/fulldisclosure/2015/Jan/63
• http://www.vulnerability-lab.com/get_content.php?id=1408

Github

No PoCs found on GitHub currently.