CVE-2017-10899

Critical

Published: 01/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in A-Reserve and A-Reserve for MT versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

An attacker could gain access to sensitive data or compromise the integrity of the database, posing a serious threat to the organization's security.

Recommendation

It is recommended to upgrade to the latest version of the software to mitigate this vulnerability and conduct a security audit of the database.

Original NVD description (English source)

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.