CVE-2017-10899

https://notcve.org/view.php?id=CVE-2017-10899

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en A-Reserve y A-Reserve para MT cloud en versiones 3.8.6 y anteriores permite que un atacante ejecute comandos SQL arbitrarios mediante vectores no especificados. • https://jvn.jp/en/jp/JVN78501037/index.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •