VYPR

Storefront B2B

by Infor

CVEs (1)

  • CVE-2020-37033HigJan 30, 2026
    risk 0.53cvss 8.2epss 0.00

    Infor Storefront B2B 1.0 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'usr_name' parameter in login requests. Attackers can exploit the vulnerability by injecting malicious SQL code into the 'usr_name' parameter to potentially extract or modify database information.