High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-03-23	CVE-2023-24788	SQL Injection vulnerability in Notrinos Notrinoserp 0.7 NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php. network low complexity notrinos CWE-89	8.8
2022-08-21	CVE-2022-2921	Unspecified vulnerability in Notrinos Notrinoserp Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. network low complexity notrinos	8.8