CVE-2020-13968

CVE-2020-13968

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the ‘strSessao’ parameter.

Source: CVE-2020-13968