EUVD-2020-6143

Malware in sbrugna...

EUVD-2020-6142

Malware in sbrugna...

CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

CVE-2020-13969

CRK Business Platform = 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent...

Malicious code in crk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8faee19e31b2b8f674e006fb2466339f6f0529fdb5296ba70effa34d39e683 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2237 Malicious code in crk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8faee19e31b2b8f674e006fb2466339f6f0529fdb5296ba70effa34d39e683 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

CVE-2020-13969

CRK Business Platform = 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent...

CVE-2020-13969

CRK Business Platform = 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent...

CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

Cross site scripting

CRK Business Platform = 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent...

Code injection

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

CVE-2020-13969

CRK Business Platform = 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent...

CVE-2020-13969

CVE-2020-13969 affects CRK Business Platform <= 2019.1 and is caused by a reflected XSS in erro.aspx through the parameters CRK, IDContratante, Erro, or Mod. The vulnerability is path-independent, meaning the attack could be triggered regardless of URL path. Related entries (NVD, Red Hat, EUVD...

CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

CVE-2020-13968

CRK Business Platform <= 2019.1 is vulnerable to SQL injection via the strSessao parameter on any path, allowing the attacker to inject statements against the database. The root cause is unauthenticated input in the strSessao parameter that is not properly sanitized before being used in SQL st...

Grupo Crk Banking Business Platform SQL Injection Vulnerability

Grupo Crk Banking Business Platform is a business management software from Grupo Crk, Portugal. A SQL injection vulnerability exists in CRK Business Platform version 2019.1 and prior versions that stems from allowing SQL statements to be injected into the database using the strSessao parameter...