CVE-2019-15301: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter...

PT-2019-14040

Name of the Vulnerable Software and Affected Versions Terrasoft Bpm'online CRM-System SDK version 7.13 Description A SQL injection issue exists in the Terrasoft.Core.DB.Column.Const method, allowing attackers to execute arbitrary SQL commands via the value parameter. Recommendations For version...