Threats tagged 'ghsa-44c4-4jvp-phv7'

Adobe Connect contains a critical SQL Injection vulnerability that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability involves improper neutralization of special elements in SQL commands, potentially leading to full compromise in the context of the current user. The scope of impact is changed, indicating possible privilege escalation or broader impact beyond the initial component.