Crk

crk

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-13969 1Crk 1Business Platform Jun 17, 2026 Dec 23, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent.
CVE-2020-13968 1Crk 1Business Platform Jun 17, 2026 Dec 23, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.