CVE-2017-17960: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...

CVE-2017-17956: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...

PT-2017-15127

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the companyname...

PT-2017-15131

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to a CSRF vulnerability. It affects the "admin/sellerupd.php" API endpoint. Recommendations At the moment, there is no information abou...