CVE-2023-36644

Publication date

2024-04-04 00:00:00

Family

mitre

State

PUBLISHED

Description

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.