Skip to content

CVE-2017-10898 SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

CriticalCVSS 9.8 EPSS 1.3%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Affected products

ProductAffected versionsFixed in
ark-web a-member <= 3.8.6 No fix listed
princeton A-Member = versions 3.8.6 and earlier No fix listed
princeton A-Member for MT cloud = versions 3.8.6 and earlier No fix listed

References

  • JVN#78501037 issue-tracking third-party-advisory vdb-entry