Basic B2b Script Project Basic B2b Script — known CVE vulnerabilities

Every CVE whose affected-product data names Basic B2b Script Project Basic B2b Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-17600 — CVSS 9.8 (critical): Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
• CVE-2018-20644 — CVSS 8.8 (high): PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
• CVE-2018-20646 — CVSS 6.5 (medium): PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an…
• CVE-2018-20645 — CVSS 5.4 (medium): PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.