What’s Vulnerable › Vulnerabilities

CVE-2020-13968

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-23 · updated 2026-06-17
• Weakness: CWE-89

Description

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.

Affected products

• Crk Business Platform: through 2019.1

References

• http://crk.com.br/produtos/
• https://github.com/r3naissance/nse/blob/master/http-vuln-cve2020-13968.nse
• http://crk.com.br/produtos/
• https://github.com/r3naissance/nse/blob/master/http-vuln-cve2020-13968.nse

Get alerted when CVE-2020-13968 or the next vulnerability affects your stack