CVE-2017-10898

Critical

Published: 01/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in A-Member and A-Member for MT versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to upgrade to the latest version of A-Member to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.