CVE-2017-17954

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...

CVE-2017-17960

The CVE-2017-17960 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce and a CSRF vulnerability via admin/sellerupd.php. The connected records consistently identify a cross-site request forgery issue without detailing affected versions or root cause beyond the vulnerability type. Exploitati...

CVE-2017-17955

The CVE-2017-17955 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce and is supported by multiple connected records showing an XSS vulnerability in the shopping-cart.php cusid parameter. The exploitable vector is a reflected/persistent cross-site scripting via that parameter, but explicit...

CVE-2017-17955

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...

CVE-2017-17953

The CVE-2017-17953 entry applies to PHP Scripts Mall PHP Multivendor Ecommerce. A cross-site scripting (XSS) vulnerability exists in the category.phpchid1 parameter, enabling script injection. This is the underlying issue described across multiple sources (NVD/Red Hat/CNVD/etc.). The exact impact...

CVE-2017-17959

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

PT-2017-15125

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the usid parameter in the...

PT-2017-15128

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to SQL Injection, which occurs via the fid parameter in the "my wishlist.php" API endpoint. Recommendations At the moment, there is no...

PT-2017-15123

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue allows remote attackers to register with an invalid or spoofed e-mail address due to a predictable registration URL. Recommendations At the moment...

PT-2017-15129

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts on the website. This is achieved by exploiting the fid parameter in th...

PT-2017-15131

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to a CSRF vulnerability. It affects the "admin/sellerupd.php" API endpoint. Recommendations At the moment, there is no information abou...

PT-2017-15130

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to SQL Injection, which can be exploited via the usid parameter in the "seller-view.php" API endpoint. Recommendations For PHP Scripts...

CVE-2017-17953: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...

CVE-2017-17957: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...

CVE-2017-17952: Improper Input Validation

PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...

CVE-2017-17954: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...

PT-2017-15127

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the companyname...

PT-2017-15122

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a SQL Injection vulnerability. It is exploited via the cusid parameter in the "shopping-cart.php" endpoint. Recommendations At the moment...

CVE-2017-17951: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...

PT-2017-15126

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the cusid parameter in the "shopping-cart.ph...