CVE-2018-6019

The CVE-2018-6019 entry concerns Samsung Display Solutions App for Android prior to version 3.02. The underlying issue is failure to encrypt information transmitted by the app, enabling a man-in-the-middle attacker to spoof or inject B2B content. Affected component: Samsung Display Solutions App ...

b2b-zentrum.de XSS vulnerability

Open Bug Bounty ID: OBB-572512 Description| Value ---|--- Affected Website:| b2b-zentrum.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Scripts Mall Advance B2B Script SQL Injection Vulnerability

PHP Scripts Mall Advance B2B Script is a set of PHP-based B2B2 business-to-business transactional website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Advance B2B Script version 2.1.3. A remote attacker can exploit this vulnerability by sending the...

CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17600

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

Sql injection

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

Sql injection

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17600

CVE-2017-17600 affects Basic B2B Script 2.0.8, with a SQL Injection vulnerability via the id parameter in product_details.php. The root cause is unsafe handling of the id input that enables injection of SQL commands. This vulnerability has a high impact in CVSS terms (confidentiality, integrity, ...

CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

CVE-2017-17600

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

CVE-2017-17602

CVE-2017-17602 affects the PHP Scripts Mall Advance B2B Script v2.1.3. The vulnerability is an SQL Injection: the application processes user-supplied parameters via tradeshow-list-detail.php (show_id) or view-product.php (pid) without adequate input validation, enabling arbitrary SQL commands. Pu...

Basic B2B Script 2.0.8 SQL Injection

Exploit Title: Basic B2B Script 2.0.8 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-b2b-script/ Version: 2.0.8 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author...

Advance B2B Script 2.1.3 - show_id / pid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2...

Advance B2B Script 2.1.3 - show_id pid SQL Injection

Advance B2B Script 2.1.3 - showid pid SQL Injection Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2b/...

Basic B2B Script 2.0.8 - product_details.php?id SQL Injection

Basic B2B Script 2.0.8 - productdetails.php?id SQL Injection Exploit Title: Basic B2B Script 2.0.8 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-b2b-script/ Version: 2.0.8 Category:...

CVE-2017-1482

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2017-1481

IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 128619...

Information disclosure

IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 128619...

Cross site scripting

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...