CVE-2017-17951

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...

CVE-2017-17951

The CVE-2017-17951 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, with a documented SQL Injection vulnerability in the shopping-cart.php cusid parameter. The issue is a SQL injection in the cart flow likely due to improper handling of the cusid input in SQL queries (root cause: unsafe...