Vulnerabilities > Notrinos > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-23 CVE-2023-24788 SQL Injection vulnerability in Notrinos Notrinoserp 0.7
NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.
network
low complexity
notrinos CWE-89
8.8
2022-08-21 CVE-2022-2921 Unspecified vulnerability in Notrinos Notrinoserp
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7.
network
low complexity
notrinos
8.8