critical9.8
CVE-2020-13968
CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.
Impact
CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crk | Business Platform | through 2019.1 |