CVE-2014-3415

SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the inviteusers parameter to the /invite page for a group...

Sql injection

SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the inviteusers parameter to the /invite page for a group...

CVE-2014-3415

Affected software : Sharetronix (v3.3 and probably prior). Vulnerability : SQL Injection (CWE-89) via the invite_users[] parameter on the /[group]/invite page. Input is not properly sanitized before being used in a SQL query, enabling a remote authenticated user to execute arbitrary SQL commands ...

CVE-2014-3415: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the inviteusers parameter to the /invite page for a group...