CVE-2020-13968

Publication date

2020-12-23 17:19:58

Family

mitre

State

PUBLISHED

Description

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the strSessao parameter.