← Back

Advance B2b Script Project

advance_b2b_script_project

5 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Advance B2b Script
advance_b2b_script
5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20635
1Advance B2b Script Project
1Advance B2b Script
Nov 21, 2024
Mar 21, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVE-2018-20634
1Advance B2b Script Project
1Advance B2b Script
Nov 21, 2024
Mar 21, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field.
CVE-2018-20633
1Advance B2b Script Project
1Advance B2b Script
Nov 21, 2024
Mar 21, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
CVE-2018-20632
1Advance B2b Script Project
1Advance B2b Script
Nov 21, 2024
Mar 21, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
CVE-2017-17602
1Advance B2b Script Project
1Advance B2b Script
May 13, 2026
Dec 13, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.