Basic B2b Script Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Basic B2b Script Project records in CISA KEV

No Basic B2b Script Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Basic B2b Script 4 records MEDIUM

Records

4 records in Basic B2b Script · all components

TI-2017-12871 CVE-2017-17600 · GHSA-3xm6-cvq4-w82f

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

MEDIUM 48

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89

TI-2018-14661 CVE-2018-20644 · GHSA-g65q-gwjf-668c

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

LOW 39

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2019-03-20 No fix listed CWE-352

TI-2018-14663 CVE-2018-20646 · GHSA-m4rh-gx48-v325

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request…

LOW 32

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01637 Published 2019-03-20 No fix listed CWE-22

TI-2018-14662 CVE-2018-20645 · GHSA-8cqm-wmpm-wfwh

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

LOW 25

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2019-03-20 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0