CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

Code injection

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

CVE-2020-13968

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...

PT-2020-13806

Name of the Vulnerable Software and Affected Versions CRK Business Platform versions prior to 2019.1 Description The issue allows SQL statements to be injected against the database on any path using the strSessao parameter. This enables potential attackers to manipulate database queries,...

Grupo Crk Banking Business Platform SQL Injection Vulnerability

Grupo Crk Banking Business Platform is a business management software from Grupo Crk, Portugal. A SQL injection vulnerability exists in CRK Business Platform version 2019.1 and prior versions that stems from allowing SQL statements to be injected into the database using the strSessao parameter...

CVE-2020-13968: Improper Neutralization of Special Elements used in an SQL Command

CRK Business Platform = 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter...