VendorsBasic B2B Script Projectbasic_b2b_scriptall versions
Vulnerabilities

Basic B2B Script Project Basic B2B Script

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2017-17600
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
Published 2017-12-13 · Modified
9.81 PoCEPSS 0.031
CVE-2018-20644
PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
Published 2019-03-20 · Modified
8.8EPSS 0.007
CVE-2018-20646
PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.
Published 2019-03-20 · Modified
6.5EPSS 0.016
CVE-2018-20645
PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.
Published 2019-03-20 · Modified
5.4EPSS 0.007