CVE-2019-13027

CVE-2019-13027 CVE-2019-13027 開示の詳細 ベンダー連絡のタイムライン: 1st July 2019 - 応答なし、メールの返信なし。 4th July 2019 - 応答なし、メールの返信なし。 8th July 2019 - メール送信、Github 作成。 11 July 2019 - ベンダーからの応答なし。脆弱性を開示。 脆弱性タイプ SQL インジェクション 影響を受ける製品コードベース CONCERTO CRITICAL CHAIN PLANNER CCPM - バージョン: 5.10.8071 5.x...

EUVD-2019-4595

Malware in sbrugna...

CVE-2019-13027

Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...

Sql injection

Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...

CVE-2019-13027

Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...

CVE-2019-13027

Realization Concerto Critical Chain Planner (CCPM) 5.10.8071 has an SQL Injection in the taskupdt/taskdetails.aspx page via the projectname parameter. Root cause cited: lack of input validation leading to unsanitized SQL statements. Impact described as the ability to execute arbitrary SQL command...

PT-2019-13085

Name of the Vulnerable Software and Affected Versions Realization Concerto Critical Chain Planner aka CCPM version 5.10.8071 Description The issue concerns a SQL Injection problem. It is located in the taskupdt/taskdetails.aspx webpage, specifically via the projectname parameter. Recommendations...

CVE-2019-13027: Improper Neutralization of Special Elements used in an SQL Command

Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...