CVE-2017-17987

CVE-2017-17987 affects PHP Scripts Mall’s Muslim Matrimonial Script. The vulnerability is an arbitrary file upload via admin/mydetails_edit.php , enabling upload of unrestricted files. Connected CNVD entry corroborates the arbitrary file upload issue. No exploit specifics or remediation details a...

CVE-2017-17984

The CVE-2017-17984 entry concerns PHP Scripts Mall’s Muslim Matrimonial Script, which is reported to have a Cross-Site Scripting (XSS) vulnerability via the admin/event_edit.php edit_id parameter. Connected sources (CNVD-2018-01242 and NVD) confirm an XSS flaw in this script; the vulnerability af...

CVE-2017-17986: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/casteview.php commid parameter...

CVE-2017-17985: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/stateview.php couid parameter...

CVE-2017-17981: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

CVE-2017-17988: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...

CVE-2017-17987: Unrestricted Upload of File with Dangerous Type

PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...

CVE-2017-17984: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...

CVE-2017-17983: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...

CVE-2017-17982: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadminedit.php...

PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability (CNVD-2018-00078)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. PHP Scripts Mall PHP Multivendor Ecommerce suffers from a SQL injection vulnerability. The vulnerability can be exploited by an...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Request Forgery Vulnerability

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site request forgery vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. An attacker can exploit this...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00088)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00081)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

CVE-2017-17956

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...

Cross site request forgery (csrf)

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...

CVE-2017-17954

The vulnerability concerns PHP Scripts Mall PHP Multivendor Ecommerce. A cross-site scripting (XSS) flaw exists in the seller-view.php usid parameter. The available documents identify the affected software and the vulnerable parameter but do not provide details on root-cause specifics beyond XSS,...

CVE-2017-17959

The CVE-2017-17959 vulnerability affects PHP Scripts Mall PHP Multivendor Ecommerce and is caused by a SQL Injection in the seller-view.php usid parameter. The issue has publicly reported impact metrics: CVSS v2 base score 7.5 (HIGH) with network attack vector, low complexity, and partial confide...

CVE-2017-17952

The CVE-2017-17952 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, where a predicable registration URL enables remote attackers to complete registrations using invalid or spoofed email addresses. Connected sources (Red Hat, CNVD, CNVD CNVD-2018, PRION, CVE lists, etc.) corroborate the ...