basic b2b script project basic b2b script vulnerabilities

Latest basic b2b script project basic b2b script CVEs

Newest publication first

1. CVE-2018-20646 PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.

   Published 2019-03-21

   Medium·CVSS 6.5

   PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.

2. CVE-2018-20645 PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

   Published 2019-03-21

   Medium·CVSS 5.4

   PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

3. CVE-2018-20644 PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

   Published 2019-03-21

   High·CVSS 8.8

   PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

4. CVE-2017-17600 Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

   Published 2017-12-13

   Critical·CVSS 9.8 EPSS 3.1%

   Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.