Security Advisory

CVE-2019-13027

9.8
CRITICAL

Vulnerability Description

Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter.
Published Date July 12, 2019
Official Source NIST NVD Advisory