PT-2020-13807

Name of the Vulnerable Software and Affected Versions CRK Business Platform versions = 2019.1 Description The issue allows reflected XSS via the erro.aspx page, specifically through the CRK, IDContratante, Erro, or Mod parameters. This vulnerability is path-independent. Recommendations For CRK...

CVE-2020-13969: Improper Neutralization of Input During Web Page Generation

CRK Business Platform = 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent...