Vulnerabilities

TI-2023-18462 CVE-2023-36645 · GHSA-78h8-m693-fp8x

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL…

MEDIUM 51

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2024-04-04 No fix listed CWE-94

TI-2023-18461 CVE-2023-36644 · GHSA-9wj5-w226-r39m

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive…

HIGH 74

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00955 Published 2024-04-04 No fix listed CWE-284

TI-2023-18460 CVE-2023-36643 · GHSA-5xrf-xvwc-pmfg

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive…

MEDIUM 40

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00664 Published 2024-04-04 No fix listed CWE-284

Vulnerabilities

Filters

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL…

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive…

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive…