A vulnerability classified as critical was found in ITB-GmbH TradePro 9.5. Affected by this vulnerability is the function customer of the component oordershow. The manipulation of the argument bestellid leads to sql injection.

This vulnerability is known as CVE-2023-36645. The attack can be launched remotely. There is no exploit available.