PoC Index85,092 CVEs with PoCs

CVE-2023-36644

MEDIUM 5.3EPSS 1.0%

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.

CVSS v3.1 NVD
5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v3.1 MITRE
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.95% chance of exploitation in the next 30 days, 61st percentile
Published
2024-04-04
Updated
2024-08-27

Proof-of-concept exploits (1)

References