Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Inrove Software and Internet Services Clear all filters
TI-2026-05220 CVE-2026-5955 · GHSA-fq69-8wm6-j469

SQLi in Inrove Software's BiEticaret

Priority MEDIUM 49

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2026-07-09 Fixed in v3.3.57 CWE-89
TI-2026-05074 CVE-2026-5793 · GHSA-7qpx-wmf3-25cj

XSS in Inrove Software's BiEticaret

Priority LOW 27

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00253 Published 2026-07-09 Fixed in v3.3.57 CWE-79
TI-2025-07646 CVE-2025-8350 · GHSA-v6q3-r5cf-wh3r

Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS

Priority MEDIUM 50

Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00616 Published 2026-02-19 No fix listed CWE-306