php multivendor ecommerce project vulnerabilities

Products

• php multivendor ecommerce 11

Latest php multivendor ecommerce project CVEs

Newest publication first

1. CVE-2017-17960 PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.

   Published 2017-12-28

   High·CVSS 8.8 EPSS 0.51%

   PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.

2. CVE-2017-17959 PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.

   Published 2017-12-28

   Critical·CVSS 9.8 EPSS 1.2%

   PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.

3. CVE-2017-17958 PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.

   Published 2017-12-28

   Medium·CVSS 6.1 EPSS 0.68%

   PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.

4. CVE-2017-17957 PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.

   Published 2017-12-28

   Critical·CVSS 9.8 EPSS 1.2%

   PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.

5. CVE-2017-17956 PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.

   Published 2017-12-28

   Medium·CVSS 6.1 EPSS 0.68%

   PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.

6. CVE-2017-17955 PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.

   Published 2017-12-28

   Medium·CVSS 6.1 EPSS 0.68%

   PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.

7. CVE-2017-17954 PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.

   Published 2017-12-28

   Medium·CVSS 6.1 EPSS 0.68%

   PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.

8. CVE-2017-17953 PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.

   Published 2017-12-28

   Medium·CVSS 6.1 EPSS 0.68%

   PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.

9. CVE-2017-17952 PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.

   Published 2017-12-28

   High·CVSS 8.6 EPSS 1.1%

   PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.

10. CVE-2017-17951 PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.

    Published 2017-12-28

    Critical·CVSS 9.8 EPSS 1.2%

    PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.

11. CVE-2017-17624 PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.

    Published 2017-12-13

    Critical·CVSS 9.8 EPSS 3.1%

    PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.