Sql injection

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17600

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

CVE-2017-17600

CVE-2017-17600 affects Basic B2B Script 2.0.8, with a SQL Injection vulnerability via the id parameter in product_details.php. The root cause is unsafe handling of the id input that enables injection of SQL commands. This vulnerability has a high impact in CVSS terms (confidentiality, integrity, ...

CVE-2017-17602

CVE-2017-17602 affects the PHP Scripts Mall Advance B2B Script v2.1.3. The vulnerability is an SQL Injection: the application processes user-supplied parameters via tradeshow-list-detail.php (show_id) or view-product.php (pid) without adequate input validation, enabling arbitrary SQL commands. Pu...

PT-2017-14898

Name of the Vulnerable Software and Affected Versions Advance B2B Script version 2.1.3 Description The issue is related to SQL Injection, which can be exploited via the show id parameter in the "tradeshow-list-detail.php" endpoint or the pid parameter in the "view-product.php" endpoint...

PT-2017-14896

Name of the Vulnerable Software and Affected Versions Basic B2B Script version 2.0.8 Description The issue is related to SQL Injection, which occurs via the id parameter in the "product details.php" API endpoint. Recommendations For Basic B2B Script version 2.0.8, consider restricting access to t...

CVE-2017-17602: Improper Neutralization of Special Elements used in an SQL Command

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17600: Improper Neutralization of Special Elements used in an SQL Command

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

Basic B2B Script 2.0.8 SQL Injection

Exploit Title: Basic B2B Script 2.0.8 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-b2b-script/ Version: 2.0.8 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author...

Advance B2B Script 2.1.3 - show_id / pid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2...

Basic B2B Script 2.0.8 - product_details.php?id SQL Injection

Basic B2B Script 2.0.8 - productdetails.php?id SQL Injection Exploit Title: Basic B2B Script 2.0.8 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-b2b-script/ Version: 2.0.8 Category:...

Advance B2B Script 2.1.3 - show_id pid SQL Injection

Advance B2B Script 2.1.3 - showid pid SQL Injection Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2b/...

Basic B2B Script SQL Injection

Exploit Title: Basic B2B Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/nC3F4570353/php-scripts/basic-b2b-script Demo: http://readymadeb2bscript.com/product/entrepreneur/ Version: N/A Category...

CVE-2017-15985

Basic B2B Script allows SQL Injection via the productview1.php pid or id parameter...

Sql injection

Basic B2B Script allows SQL Injection via the productview1.php pid or id parameter...

CVE-2017-15985

Basic B2B Script allows SQL Injection via the productview1.php pid or id parameter...

CVE-2017-15985: Improper Neutralization of Special Elements used in an SQL Command

Basic B2B Script allows SQL Injection via the productview1.php pid or id parameter...

PT-2017-14340

Name of the Vulnerable Software and Affected Versions Basic B2B Script affected versions not specified Description The issue allows SQL Injection via the product view1.php page, specifically through the pid or id parameters. Recommendations For all affected versions, avoid using the pid or id...

iTech B2B Script 4.42 - SQL Injection

Exploit Title: Itech B2B Script 4.42 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : http://itechscripts.com/ Software Link: http://itechscripts.com/c/B2B/ Demo: http://b2b.itechscripts.com/ Version: 4.42 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: Exploit Author: Ihsan...