CVE-2017-17600

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Basic B2B Script version 2.0.8 has a SQL Injection vulnerability via the id parameter in the product_details.php file.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to update the script to the latest version and implement input validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.