Tradebox vulnerabilities

CVEs whose affected-version data names the Tradebox package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2019-25505High· 7.1PoC

7mo ago

Tradebox 5.4 SQL Injection via symbol Parameter

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthly_deposit endpoint …

▾ MidnightBdtask · TradeboxEPSS 0.29%via CVEORG