Basic B2b Script Project Basic B2b Script
4 CVEs affecting Basic B2b Script Project Basic B2b Script. Latest disclosed: 2019-03-21. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17600 | Critical | 9.8 | 2017-12-13 | Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter. |
CVE-2018-20644 | High | 8.8 | 2019-03-21 | PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature. |
CVE-2018-20646 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory. |
CVE-2018-20645 | Medium | 5.4 | 2019-03-21 | PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field. |