CVE-2019-15535

Tasking Manager before 3.4.0 is vulnerable to SQL Injection via unvalidated external SQL statements in the database layer. Root cause: lack of input validation for SQL statements issued to the database. Impact: potential arbitrary SQL execution with access/modify capabilities as described by the ...