EVENTOBOT vulnerabilities
We track 1 vulnerability in EVENTOBOT products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 9, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest EVENTOBOT vulnerabilities
- 9.8 Critical severity
Eventobot: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'promo_send' parameter in the '/assets/php/calculate_discount.php'.