Tradepro Security Vulnerabilities and Issues — Tradepro CVE List

Lucene search

Itb-pimTradepro

3 matches found

CVE•added 2024/04/04 9:15 a.m.•45 views

CVE-2023-36645

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.

9.8CVSS9.4AI score0.00177EPSS

CVE•added 2024/04/04 9:15 a.m.•43 views

CVE-2023-36643

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.

7.5CVSS7.5AI score0.00635EPSS

CVE•added 2024/04/04 9:15 a.m.•38 views

CVE-2023-36644

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.

7.5CVSS7.5AI score0.00499EPSS