Vulnerabilities > Notrinos

DATE CVE VULNERABILITY TITLE RISK
2023-03-23 CVE-2023-24788 SQL Injection vulnerability in Notrinos Notrinoserp 0.7
NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.
network
low complexity
notrinos CWE-89
8.8
2022-08-23 CVE-2022-2965 Improper Restriction of Rendered UI Layers or Frames vulnerability in Notrinos Notrinoserp
Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7.
network
low complexity
notrinos CWE-1021
4.3
2022-08-22 CVE-2022-2927 Weak Password Requirements vulnerability in Notrinos Notrinoserp
Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.
network
low complexity
notrinos CWE-521
critical
9.8
2022-08-21 CVE-2022-2921 Privacy Violation vulnerability in Notrinos Notrinoserp
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7.
network
low complexity
notrinos CWE-359
8.8
2022-08-17 CVE-2022-2871 Cross-site Scripting vulnerability in Notrinos Notrinoserp
Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.
network
low complexity
notrinos CWE-79
5.4