PT-2026-5474 · Infor · Infor Storefront B2B

Ratboy · Publicado 2026-01-30 · Atualizado 2026-02-03 · CVE-2020-37033

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Infor Storefront B2B version 1.0

Description Infor Storefront B2B version 1.0 contains a SQL injection issue that allows attackers to manipulate database queries. This is achieved through the usr name parameter within login requests. Attackers can inject malicious SQL code into the usr name parameter, potentially allowing them to extract or modify database information. The vulnerable API endpoint is the login request.

Recommendations Versions prior to 1.0 should be updated.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2020-37033

Produtos afetados

Infor Storefront B2B

Referências · 6

• 🔥 https://exploit-db.com/exploits/48674 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37033 · Nota de Segurança
• https://t.me/cveNotify/150754 · Publicação no Telegram
• https://vulncheck.com/advisories/infor-storefront-bb-usrname-sql-injection · Nota
• https://web.archive.org/web/20191223051205/https://insitesoft.com/infor-storefront · Nota
• https://t.me/CVEtracker/43351 · Publicação no Telegram