JVN#50704770: Aipo vulnerable to SQL injection

Aipo from Aimluck, Inc. is groupware including functions such as scheduler and intra-office blogging. Aipo contains a SQL injection vulnerability.

Impact

Contents that are managed by Aipo may be viewed by a user that can login to Aipo.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

This issue has been resolved in Aipo Version 5.1.0.1.

Products Affected

• Aipo Version 5.1 and earlier
• Aipo for ASP Version 5.1 and earlier