CVE-2014-100019

SQL injection vulnerability in the LTree converter in Pomm before 1.1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Date published : 2015-01-13

http://www.securityfocus.com/bid/65711

http://www.pomm-project.org/news/pomm-1-1-5-is-out.html