CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.

Published Dec 23, 2020 · Updated Aug 4, 2024 · Assigned by mitre