Vulnerabilities

TI-2023-10297 CVE-2023-24788 · GHSA-4pqp-69m3-f8pp

NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the…

HIGH 73

NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03088 Published 2023-03-23 No fix listed CWE-89

TI-2022-02739 CVE-2022-2965 · GHSA-f87g-r63w-q629

LOW 21

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0074 Published 2022-08-23 Fixed in 0.7 CWE-1021

TI-2022-02707 CVE-2022-2927 · GHSA-qhm8-69qh-g76j

MEDIUM 44

Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00959 Published 2022-08-22 Fixed in 0.7 CWE-521

TI-2022-02701 CVE-2022-2921 · GHSA-44w5-q257-8428

MEDIUM 41

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01399 Published 2022-08-21 Fixed in 0.7 CWE-359

TI-2022-02663 CVE-2022-2871 · GHSA-hrx5-cv4v-4c44

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00683 Published 2022-08-17 Fixed in 0.7 CWE-79