CVE-2020-13968 (business_platform)

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the ‘strSessao’ parameter.

View Full Alert

Related Posts

  • CVE-2020-10936

    Sympa before 6.2.56 allows privilege escalation. View Full Alert

  • CVE-2020-10945

    Centreon before 19.10.7 exposes Session IDs in server responses. View Full Alert

  • CVE-2020-13168

    SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. View Full Alert