Lucene search
K

9 matches found

CNVD
CNVD
added 2017/12/29 12:0 a.m.1 views

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

6.1CVSS6.4AI score0.0024EPSS
Exploits1References1
Cvelist
Cvelist
added 2017/12/28 6:0 p.m.12 views

CVE-2017-17953

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...

6.1AI score0.0024EPSS
Exploits1References1
CVE
CVE
added 2017/12/28 6:0 p.m.42 views

CVE-2017-17953

The CVE-2017-17953 entry applies to PHP Scripts Mall PHP Multivendor Ecommerce. A cross-site scripting (XSS) vulnerability exists in the category.phpchid1 parameter, enabling script injection. This is the underlying issue described across multiple sources (NVD/Red Hat/CNVD/etc.). The exact impact...

6.1CVSS6AI score0.0024EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2017/12/15 12:0 a.m.1 views

PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability

PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...

9.8CVSS8.1AI score0.02512EPSS
Exploits1References1
OSV
OSV
added 2017/12/13 9:29 a.m.2 views

CVE-2017-17624

PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...

9.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2017/12/13 9:29 a.m.9 views

CVE-2017-17624

PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...

9.8CVSS10AI score0.02512EPSS
Exploits1References2
Prion
Prion
added 2017/12/13 9:29 a.m.12 views

Sql injection

PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...

7.5CVSS9.9AI score0.02512EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2017/12/13 9:0 a.m.15 views

CVE-2017-17624

PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...

10AI score0.02512EPSS
Exploits1References2
Exploit DB
Exploit DB
added 2017/12/11 12:0 a.m.139 views

PHP Multivendor Ecommerce 1.0 - 'sid' / 'searchcat' / 'chid1' SQL Injection

Exploit Title: PHP Multivendor Ecommerce 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/php-multivendor-ecommerce/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

7.4AI score
Exploits0
Rows per page
Query Builder