Skip to content

CVE-2017-10899 SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

CriticalCVSS 9.8 EPSS 1.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Affected products

ProductAffected versionsFixed in
ark-web a-reserve <= 3.8.6 No fix listed
princeton A-Reserve = versions 3.8.6 and earlier No fix listed
princeton A-Reserve for MT cloud = versions 3.8.6 and earlier No fix listed

References

  • JVN#78501037 issue-tracking third-party-advisory vdb-entry