Vulnerabilities > Notrinos

DATE CVE VULNERABILITY TITLE RISK
2023-03-23 CVE-2023-24788 SQL Injection vulnerability in Notrinos Notrinoserp 0.7
NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.
network
low complexity
notrinos CWE-89
8.8
2022-08-23 CVE-2022-2965 Unspecified vulnerability in Notrinos Notrinoserp
Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7.
network
low complexity
notrinos
4.3
2022-08-22 CVE-2022-2927 Unspecified vulnerability in Notrinos Notrinoserp
Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.
network
low complexity
notrinos
critical
9.8
2022-08-21 CVE-2022-2921 Unspecified vulnerability in Notrinos Notrinoserp
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7.
network
low complexity
notrinos
8.8
2022-08-17 CVE-2022-2871 Unspecified vulnerability in Notrinos Notrinoserp
Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.
network
low complexity
notrinos
5.4