SQL Injection in Kk-Osk Advance-Flow
CVE-2014-3906
SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Vulnerability class: SQL Injection
EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.
Affected products
- Kk-osk Advance-flow
- Kk-osk Advance-flow_forms
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)