CVE-2017-12585

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAXlookuphandler.php tableName and tableFields parameters, admin/AJAXcheckid.php, and admin/AJAXvocabolarycontrol.php. It can be exploited by remote authenticated librarian users...

CVE-2017-12585

CVE-2017-12585 affects SLiMS 8 Akasia through 8.3.1. The vulnerability is an SQL injection in admin/AJAX_lookup_handler.php (parameters tableName and tableFields), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. It can be exploited by remote authenticated librarian users. The exac...