CVE-2019-13027: Improper Neutralization of Special Elements used in an SQL Command

Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...

PT-2019-13085

Name of the Vulnerable Software and Affected Versions Realization Concerto Critical Chain Planner aka CCPM version 5.10.8071 Description The issue concerns a SQL Injection problem. It is located in the taskupdt/taskdetails.aspx webpage, specifically via the projectname parameter. Recommendations...