Advance B2B Script Project
Advance B2B Script Project Advance B2B Script: vulnerabilidades y CVE
Advance B2B Script Project Advance B2B Script tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-20635 | Media (4.3) | 1.3% | — | 21 mar 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory. |
| CVE-2018-20634 | Media (6.5) | 1.6% | — | 21 mar 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field. |
| CVE-2018-20633 | Alta (8.8) | 0.65% | — | 21 mar 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature. |
| CVE-2018-20632 | Media (5.4) | 0.65% | — | 21 mar 2019 | PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field. |
| CVE-2017-17602 | Crítica (9.8) | 3.0% | — | 13 dic 2017 | Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter. |