Vulnerabilities > Realization

DATE CVE VULNERABILITY TITLE RISK
2019-07-12 CVE-2019-13027 SQL Injection vulnerability in Realization Concerto Critical Chain Planner 5.10.8071
Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter.
network
low complexity
realization CWE-89
critical
9.8