CVE-2010-3924

SQL injection vulnerability in Aimluck Aipo before 5.1.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-3924

CVE-2010-3924 describes an SQL injection vulnerability in Aimluck Aipo prior to version 5.1.0.1. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, potentially exposing or altering data managed by Aipo. Affected product: Aimluck Aipo (groupware ...

PT-2011-1449

Name of the Vulnerable Software and Affected Versions Aimluck Aipo versions prior to 5.1.0.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 5.1.0.1, update to version 5.1.0.1 or later to resolve the issue...

CVE-2010-3924: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Aimluck Aipo before 5.1.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

JVN#50704770: Aipo vulnerable to SQL injection

Aipo from Aimluck, Inc. is groupware including functions such as scheduler and intra-office blogging. Aipo contains a SQL injection vulnerability. Impact Contents that are managed by Aipo may be viewed by a user that can login to Aipo. Solution Update the Software Update to the latest version...

JVN#70075625 Aipo session fixation vulnerability

Aipo from Aimluck, Inc. is groupware including functions such as scheduler and intra-blogging. Aipo contains a session fixation vulnerability which may allow an attacker to impersonate a user when the user logs into AIPO with the session ID sent by the attacker. Impact This vulnerability may allo...