25 matches found
PT-2017-14896
Name of the Vulnerable Software and Affected Versions Basic B2B Script version 2.0.8 Description The issue is related to SQL Injection, which occurs via the id parameter in the "product details.php" API endpoint. Recommendations For Basic B2B Script version 2.0.8, consider restricting access to t...
CVE-2017-17600: Improper Neutralization of Special Elements used in an SQL Command
Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...
CVE-2017-15985
Basic B2B Script allows SQL Injection via the productview1.php pid or id parameter...
CVE-2017-15985: Improper Neutralization of Special Elements used in an SQL Command
Basic B2B Script allows SQL Injection via the productview1.php pid or id parameter...
PT-2017-14340
Name of the Vulnerable Software and Affected Versions Basic B2B Script affected versions not specified Description The issue allows SQL Injection via the product view1.php page, specifically through the pid or id parameters. Recommendations For all affected versions, avoid using the pid or id...