← Back

Basic B2b Script

basic_b2b_script

Vendor: Basic B2b Script Project • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20646
1Basic B2b Script Project
1Basic B2b Script
Nov 21, 2024
Mar 21, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.
CVE-2018-20645
1Basic B2b Script Project
1Basic B2b Script
Nov 21, 2024
Mar 21, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.
CVE-2018-20644
1Basic B2b Script Project
1Basic B2b Script
Nov 21, 2024
Mar 21, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
CVE-2017-17600
1Basic B2b Script Project
1Basic B2b Script
May 13, 2026
Dec 13, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.