PT-2014-5595

Name of the Vulnerable Software and Affected Versions OSK Advance-Flow versions 4.41 and earlier OSK Advance-Flow Forms versions 4.41 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For OSK Advance-Flow versions 4.41 and earlier, update...

CVE-2014-3906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in OSK Advance-Flow 4.41 and earlier and Advance-Flow Forms 4.41 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...