exploitDog

CVE-2020-13968

Опубликовано: 23 дек. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.

Ссылки

http://crk.com.br/produtos/
Product
Vendor Advisory
https://github.com/r3naissance/nse/blob/master/http-vuln-cve2020-13968.nse
Exploit
Third Party Advisory
http://crk.com.br/produtos/
Product
Vendor Advisory
https://github.com/r3naissance/nse/blob/master/http-vuln-cve2020-13968.nse
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:crk:business_platform:*:*:*:*:*:*:*:*

Версия до 2019.1 (включая)

EPSS

Процентиль: 73%

0.00779

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-q768-rrh4-6p7h

github

больше 3 лет назад

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.

EPSS

Процентиль: 73%

0.00779

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89