Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-13969

CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Crk
Products
Business Platform
CVE-2020-13968

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Crk
Products
Business Platform