Unscored CVE-2014-3906 EUVD-2014-3843GHSA-7cf2-8rwr-p3q6

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute…

Published Aug 19, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

JVNDB-2014-000099 third-party-advisory
JVN#20812625 third-party-advisory