Unscored CVE-2018-17232 EUVD-2018-8992GHSA-3xg5-3w6j-4vf8

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attac…

Published Sep 20, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute().

References

https://github.com/docmarionum1/slack-archive-bot/issues/12