Read the docs

Inrove Software and Internet Services

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Inrove Software and Internet Services records in CISA KEV

No Inrove Software and Internet Services vulnerabilities are listed in CISA KEV.

Records

3 records

Priority MEDIUM 50

Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00616 Published 2026-02-19 No fix listed CWE-306
TI-2026-05220 CVE-2026-5955 · GHSA-fq69-8wm6-j469

SQLi in Inrove Software's BiEticaret

Priority MEDIUM 49

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2026-07-09 Fixed in v3.3.57 CWE-89
TI-2026-05074 CVE-2026-5793 · GHSA-7qpx-wmf3-25cj

XSS in Inrove Software's BiEticaret

Priority LOW 27

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00253 Published 2026-07-09 Fixed in v3.3.57 CWE-79
Open these records in search →