Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3069▲ 549 respecto a la semana anterior

Críticas / altas1455▲ 270 respecto a la semana anterior

Nueva explotación activa (KEV)8▼ 2 respecto a la semana anterior

Sin puntuar (sin CVSS)383▲ 176 respecto a la semana anterior

13 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-20137	Modificada	Alta (7.5)	0.74%	—	Itechscripts B2B Script	16/7/2022	17/6/2026	A vulnerability was found in Itech B2B Script 4.28. It has been rated as critical. This issue affects some unknown processing of the file /catcompany.php. The manipulation of the argument token with the input 704667c6a1e7ce56d3d6fa748ab6d9af3fd7' AND 6539=6539 AND 'Fakj'='Fakj leads to sql injection. The attack may be…
CVE-2017-12757	Modificada	Crítica (9.8)	3.6%	—	Ambittechnologies Itech B2B Script Ambittechnologies Itech Business Networking Script Ambittechnologies Itech Caregiver Script Ambittechnologies Itech Classifieds Script+8	9/5/2019	17/6/2026	Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image Sharing Script 4.13i…
CVE-2018-20646	Modificada	Media (6.5)	1.6%	—	Basic B2B Script Project Basic B2B Script	21/3/2019	17/6/2026	PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.
CVE-2018-20645	Modificada	Media (5.4)	0.65%	—	Basic B2B Script Project Basic B2B Script	21/3/2019	17/6/2026	PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.
CVE-2018-20644	Modificada	Alta (8.8)	0.65%	—	Basic B2B Script Project Basic B2B Script	21/3/2019	17/6/2026	PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
CVE-2018-20635	Modificada	Media (4.3)	1.3%	—	Advance B2B Script Project Advance B2B Script	21/3/2019	17/6/2026	PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVE-2018-20634	Modificada	Media (6.5)	1.6%	—	Advance B2B Script Project Advance B2B Script	21/3/2019	17/6/2026	PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field.
CVE-2018-20633	Modificada	Alta (8.8)	0.65%	—	Advance B2B Script Project Advance B2B Script	21/3/2019	17/6/2026	PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
CVE-2018-20632	Modificada	Media (5.4)	0.65%	—	Advance B2B Script Project Advance B2B Script	21/3/2019	17/6/2026	PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
CVE-2018-20138	Modificada	Media (5.4)	0.64%	—	Readymadeb2bscript Entrepreneur B2B Script	13/12/2018	17/6/2026	PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.
CVE-2017-17602	Modificada	Crítica (9.8)	3.0%	—	Advance B2B Script Project Advance B2B Script	13/12/2017	17/6/2026	Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
CVE-2017-17600	Modificada	Crítica (9.8)	3.0%	—	Basic B2B Script Project Basic B2B Script	13/12/2017	17/6/2026	Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
CVE-2017-15985	Modificada	Crítica (9.8)	2.7%	—	Readymadeb2bscript Basic B2B Script	31/10/2017	17/6/2026	Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.