JVN#03114223 SQL injection vulnerability in SKIP from SKIP User Group

SKIP from SKIP User Group is an open source SNS (Social Networking Service) software. SKIP contains a SQL injection vulnerability.

Impact

Contents created by SKIP can be altered or information saved by SKIP can be obtained by a user that can login to SKIP.

Solution

Update the software
Update to the latest version according to the information provided by the vendor.

Products Affected

• SKIP ver.1.0.2 and earlier
• SKIP ver.1.1RC2 and earlier