Website Broker Script Project - vulnerabilities (CVEs)
2 CVEs in 1 products, 0 in the last 30 days, newest from 2018-04-12.
Products
- Website Broker Script - 2 CVEs
Newest CVEs of Website Broker Script Project
- CVE-2018-6900 - CVSS 5.4 (medium), 2018-04-12: PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.
- CVE-2017-15992 - CVSS 9.8 (critical), 2017-10-31: Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.
