CVE-2019-15301

The CVE-2019-15301 entry concerns a SQL injection in Terrasoft Bpm’online CRM-System SDK 7.13, specifically in Terrasoft.Core.DB.Column.Const(). An attacker can inject arbitrary SQL via the value parameter. Supported details indicate a NETWORK attack with LOW complexity and no authentication, lea...