Website Broker Script Project Website Broker Script
2 CVEs affecting Website Broker Script Project Website Broker Script. Latest disclosed: 2018-04-12. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15992 | Critical | 9.8 | 2017-10-31 | Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php. |
CVE-2018-6900 | Medium | 5.4 | 2018-04-12 | PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page. |