Sploitus

13 exploited vulnerabilities in B2Evolution

Vulnerabilities with publicly known exploits

Vendors
B2Evolution, Unknown
With known exploits
13
Affected b2evolution versions
= 7.2.2, 1.8.5, 1.9, 1.9_beta, 1.8.2, 4.1.6, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5
Affected b2evolution b2evolution Cms versions
= 6.11.6

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2016-8901
CVSS 9.8 CRITICAL 2019-05-23FIX AVAILABLE
CVE-2022-30935
CVSS 9.1 CRITICAL 2022-09-28FIX AVAILABLE
CVE-2021-28242 3 exploits
CVSS 8.8 HIGH 2021-04-15
b2evolution 7-2-2 - (cf_name) SQL Injection Exploitb2evolution 7-2-2 - 'cf_name' SQL Injection
CVE-2006-6417 1 exploit
CVSS 7.5 HIGH 2006-12-10
b2evolution 1.8.5 < 1.9b - 'import-mt.php' Remote File Inclusion
CVE-2022-44036
CVSS 7.2 HIGH 2023-01-03FIX AVAILABLE
CVE-2013-7352
CVSS 6.8 MEDIUM 2014-04-02FIX AVAILABLE
CVE-2006-6197 3 exploits
CVSS 6.8 MEDIUM 2006-12-01FIX AVAILABLE
b2evolution 1.8.2/1.9 - '_404_not_found.page.php' Multiple Cross-Site Scripting Vulnerabilitiesb2evolution 1.8.2/1.9 - '_410_stats_gone.page.php?app_name' Cross-Site Scripting
CVE-2013-2945 4 exploits
CVSS 6.5 MEDIUM 2014-04-02FIX AVAILABLE
b2evolution 4.1.6 - Multiple Vulnerabilitiesb2evolution 4.1.6 - Multiple Vulnerabilities
CVE-2020-22839 2 exploits
CVSS 6.1 MEDIUM 2021-02-09FIX AVAILABLE
b2evolution 6.11.6 - 'tab3' Reflected XSSb2evolution CMS 6.11.6 Cross Site Scripting
CVE-2021-47800
CVSS 5.3 MEDIUM 2026-01-15FIX AVAILABLE
CVE-2011-3709
CVSS 5.0 MEDIUM 2011-09-23FIX AVAILABLE
CVE-2014-9599
CVSS 4.3 MEDIUM 2015-01-16FIX AVAILABLE
CVE-2012-5911
CVSS 4.3 MEDIUM 2012-11-17FIX AVAILABLE