Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In modules/HELPBOT_MODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in a denial of service or possibly unspecified other impact, as demonstrated by the "!calc 5 x 5" command. In versions before 3.0, modules/HELPBOT_MODULE/calc.php has the vulnerable code; in 3.0 and above, modules/HELPBOT_MODULE/HelpbotController.class.php has the vulnerable code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Budabot 安全漏洞
Vulnerability Description
Budabot是一款在线通讯系统。 Budabot 0.6版本至4.0版本中的modules/HELPBOT_MODULE存在安全漏洞，该漏洞源于程序没有进行严格的语法检测。攻击者可利用该漏洞注入命令，造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A