PT-2019-14040

Name of the Vulnerable Software and Affected Versions Terrasoft Bpm'online CRM-System SDK version 7.13 Description A SQL injection issue exists in the Terrasoft.Core.DB.Column.Const method, allowing attackers to execute arbitrary SQL commands via the value parameter. Recommendations For version...