SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.
CWE-94 Improper Control of Generation of Code ('Code Injection')