VendorsBasic B2B Script Projectbasic_b2b_script2.0.9
Vulnerabilities

Basic B2B Script Project Basic B2B Script 2.0.9

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-20644
PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
Published 2019-03-20 · Modified
8.8EPSS 0.007
CVE-2018-20646
PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.
Published 2019-03-20 · Modified
6.5EPSS 0.016
CVE-2018-20645
PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.
Published 2019-03-20 · Modified
5.4EPSS 0.007