CVE-2017-10898

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2017-12-01

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• A-member (Ark-web)
• A-member (Princeton Ltd.)
• A-member For Mt Cloud (Princeton Ltd.)

References

• https://jvn.jp/en/jp/JVN78501037/index.html