TI-2017-11715 CVE-2017-15985 · GHSA-99cg-2qhp-jx7g
Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.
Priority MEDIUM 47
Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.
Readymadeb2bscript
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Readymadeb2bscript records in CISA KEVNo Readymadeb2bscript vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2018-14265 CVE-2018-20138 · GHSA-w8qr-4phq-m679
PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings…
Priority LOW 25
PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.
TI-2018-10425 CVE-2018-14541 · GHSA-r994-7487-j377
PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name…
Priority LOW 25
PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.