215 matches found
Sql injection
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...
CVE-2017-17955
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...
CVE-2017-17954
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...
Sql injection
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...
Code injection
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...
Sql injection
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...
CVE-2017-17960
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...
CVE-2017-17960
The CVE-2017-17960 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce and a CSRF vulnerability via admin/sellerupd.php. The connected records consistently identify a cross-site request forgery issue without detailing affected versions or root cause beyond the vulnerability type. Exploitati...
CVE-2017-17951
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...
CVE-2017-17957
The CVE-2017-17957 vulnerability affects PHP Scripts Mall PHP Multivendor Ecommerce, where the my_wishlist.php fid parameter is susceptible to SQL injection. This issue enables an attacker to inject arbitrary SQL via the parameter, as reported in multiple feeds referencing a SQL injection flaw in...
CVE-2017-17954
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...
CVE-2017-17958
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...
CVE-2017-17957
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...
CVE-2017-17959
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...
CVE-2017-17960
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...
CVE-2017-17953
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...
CVE-2017-17952
The CVE-2017-17952 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, where a predicable registration URL enables remote attackers to complete registrations using invalid or spoofed email addresses. Connected sources (Red Hat, CNVD, CNVD CNVD-2018, PRION, CVE lists, etc.) corroborate the ...
CVE-2017-17956
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...
CVE-2017-17955
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...
CVE-2017-17958
CVE-2017-17958 concerns PHP Scripts Mall’s PHP Multivendor Ecommerce platform, with a reported Cross-Site Scripting (XSS) vulnerability exploitable via the my_wishlist.php parameter fid . The connected documents consistently identify XSS as the issue; no details on a specific exploit vector, affe...