Insite Software vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Insite Software products: 1 record(s), with severity, exploitation and fixes.

Infor Storefront B2B 1

Exploited only (KEV) →

CVE-2020-37033 High · 8.2 CWE-89 Jan 30, 2026

Infor Storefront B2B 1.0 - 'usr_name' SQL Injection

Infor Storefront B2B 1.0 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'usr_name' parameter in login requests. Attackers can exploit the vulnerability by injecting malicious SQL code into the 'usr_name' parameter to potentially extract or modify database information.