Gesior-AAC SQL Injection Vulnerability (CNVD-2019-31347)

Gesior-AAC is an official tibia.com layout created based on cipsoft. A SQL injection vulnerability exists in the accountmanagement.php file in versions of Gesior-AAC prior to 2019-05-01. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

CVE-2019-15574

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php...

CVE-2019-15574: Improper Neutralization of Special Elements used in an SQL Command

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php...

PT-2019-14290

Name of the Vulnerable Software and Affected Versions Gesior-AAC versions prior to 2019-05-01 Description The issue allows for SQL injection in the accountmanagement.php file, specifically through the serviceID parameter. Recommendations For versions prior to 2019-05-01, update to a version...