CVE-2023-36643

The CVE-2023-36643 entry concerns ITB-GmbH TradePro v9.5 with an incorrect access control flaw in the oordershow component of the customer function. This vulnerability allows remote attackers to retrieve all orders from the online shop, exposing sensitive order data. The available sources consist...

CVE-2023-36644

CVE-2023-36644 affects ITB-GmbH TradePro v9.5. The issue stems from Incorrect Access Control in the printmail plugin, enabling remote attackers to retrieve all order confirmations from the online shop. Connected sources corroborate the affected product (TradePro v9.5) and the vulnerability class ...

CVE-2023-36645

The CVE-2023-36645 entry concerns ITB-GmbH TradePro v9.5 with a SQL injection via the oordershow component in the customer function. Connected PT-2024-12574 details show the root cause as an access-control weakness allowing remote exploitation to execute SQL queries. Affects ITB-GmbH TradePro 9.5...