Vulnerabilities

TI-2018-14663 CVE-2018-20646 · GHSA-m4rh-gx48-v325

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request…

LOW 32

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01637 Published 2019-03-20 No fix listed CWE-22

TI-2018-14662 CVE-2018-20645 · GHSA-8cqm-wmpm-wfwh

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

LOW 25

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2019-03-20 No fix listed CWE-79

TI-2018-14661 CVE-2018-20644 · GHSA-g65q-gwjf-668c

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

LOW 39

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2019-03-20 No fix listed CWE-352

TI-2017-12871 CVE-2017-17600 · GHSA-3xm6-cvq4-w82f

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

MEDIUM 48

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89

Vulnerabilities

Filters

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request…

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.