PatchTheCVE: basic b2b scripthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-20646: PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an ihttps://patchthecve.com/cve/CVE-2018-20646.htmlhttps://patchthecve.com/cve/CVE-2018-20646.htmlWed, 17 Jun 2026 01:53:15 +0000MEDIUM 6.5: PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.CVE-2018-20645: PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.https://patchthecve.com/cve/CVE-2018-20645.htmlhttps://patchthecve.com/cve/CVE-2018-20645.htmlWed, 17 Jun 2026 01:53:15 +0000MEDIUM 5.4: PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.CVE-2018-20644: PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.https://patchthecve.com/cve/CVE-2018-20644.htmlhttps://patchthecve.com/cve/CVE-2018-20644.htmlWed, 17 Jun 2026 01:53:15 +0000HIGH 8.8: PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.CVE-2017-17600: Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.https://patchthecve.com/cve/CVE-2017-17600.htmlhttps://patchthecve.com/cve/CVE-2017-17600.htmlWed, 17 Jun 2026 01:11:21 +0000CRITICAL 9.8: Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.CVE-2017-15985: Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.https://patchthecve.com/cve/CVE-2017-15985.htmlhttps://patchthecve.com/cve/CVE-2017-15985.htmlWed, 17 Jun 2026 01:08:35 +0000CRITICAL 9.8: Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.