EUVD-2017-17739

Malware in sbrugna...

CVE-2017-8796: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered on Accellion FTA devices before FTA912180. Because mysqlrealescapestring is misused, seos/courier/communicationp2p.php allows SQL injection with the appid parameter...