Basic B2b Script (Basic B2b Script Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2019-03-21. Vendor: Basic B2b Script Project.

CVEs of Basic B2b Script

• CVE-2018-20645 - CVSS 5.4 (medium), 2019-03-21: PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.
• CVE-2018-20644 - CVSS 8.8 (high), 2019-03-21: PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
• CVE-2018-20646 - CVSS 6.5 (medium), 2019-03-21: PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.
• CVE-2017-17600 - CVSS 9.8 (critical), 2017-12-13: Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.