CVE-2018-20645

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

CVE-2018-20646: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory...

CVE-2018-20645: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field...

PT-2019-10141

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns a Cross-Site Request Forgery CSRF via the Edit profile feature. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider implementing proper...

PT-2019-10142

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue concerns HTML injection via the First Name or Last Name field. Recommendations: For PHP Scripts Mall Basic B2B Script version 2.0.9, consider validating and sanitizing use...

PT-2019-10143

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Basic B2B Script version 2.0.9 Description: The issue allows for directory traversal through a direct request for a listing of an image directory, such as an uploads/ directory. Recommendations: For PHP Scripts Mall Basic B2B...

CVE-2018-20644: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery CSRF via the Edit profile feature...

CVE-2018-14541

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

CVE-2018-14541: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...

PT-2018-12572

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Basic B2B Script version 2.0.0 Description The issue concerns Reflected and Stored XSS that can be triggered via specific fields, including First name, Last name, Address 1, City, State, and Company name. Recommendations For P...