NetSight
critical9.1

CVE-2023-36645

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.

Impact

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.

Affected products

VendorProductAffected versions
Itb-PimTradepro
Version 9.5

Weakness classification

References