CGA-WCMR-GJCV-CCPM

Bulletin has no description...

Realization Concerto Critical Chain Planner SQL Injection Vulnerability

Realization Concerto Critical Chain Planner CCPM is a project management software package. A SQL injection vulnerability exists in the taskupdt/taskdetails.aspx web page in Realization CCPM version 5.10.8071. The vulnerability stems from a database-based application that lacks validation of...

CVE-2019-13027

Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...

CVE-2019-13027

Realization Concerto Critical Chain Planner (CCPM) 5.10.8071 has an SQL Injection in the taskupdt/taskdetails.aspx page via the projectname parameter. Root cause cited: lack of input validation leading to unsanitized SQL statements. Impact described as the ability to execute arbitrary SQL command...