Website Broker Script Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Website Broker Script Project records in CISA KEV

No Website Broker Script Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Website Broker Script · all components

TI-2017-11722 CVE-2017-15992 · GHSA-9952-cfr9-vjrj

MEDIUM 47

Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2017-10-31 No fix listed CWE-89

TI-2018-05037 CVE-2018-6900 · GHSA-fj3v-p7jw-px3h

LOW 25

PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-04-12 No fix listed CWE-79