CVE-2017-10898

https://notcve.org/view.php?id=CVE-2017-10898

SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en A-Member y A-Member para MT cloud en versiones 3.8.6 y anteriores permite que un atacante ejecute comandos SQL arbitrarios mediante vectores no especificados. • https://jvn.jp/en/jp/JVN78501037/index.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •