TI-2013-02290 CVE-2013-2594 · GHSA-frrg-xqx2-fggpSQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0…Priority LOW 38SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote attackers to execute arbitrary SQL commands via the callref parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02561 · Published 2014-01-21 · No fix listed CWE-89