Itb-Pim: >> Tradepro >> 9.5 Security Vulnerabilities
Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.
CVSS Score
7.5
EPSS Score
0.007
Published
2024-04-04
SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.
CVSS Score
9.1
EPSS Score
0.002
Published
2024-04-04
Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.
CVSS Score
7.5
EPSS Score
0.009
Published
2024-04-04