Skip to content
OpenAdvisories

Product · Bdtask

Tradebox

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2019-25505

    Tradebox 5.4 SQL Injection via symbol Parameter

    Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthly_deposit endpoint with malicious symbol …

    Bdtask Tradebox