CVE-2018-20646-PHP Scripts Mall Basic B2B Script 2.0.9 has directory traversal via a direct request for a listing of an image directory such as an uploads/