3114 matches found
PT-2017-15122
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a SQL Injection vulnerability. It is exploited via the cusid parameter in the "shopping-cart.php" endpoint. Recommendations At the moment...
CVE-2017-17959: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...
PT-2017-15124
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the category.php endpoint, specifically by...
PT-2017-15131
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to a CSRF vulnerability. It affects the "admin/sellerupd.php" API endpoint. Recommendations At the moment, there is no information abou...
CVE-2017-17957: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...
PT-2017-15130
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to SQL Injection, which can be exploited via the usid parameter in the "seller-view.php" API endpoint. Recommendations For PHP Scripts...
PT-2017-15123
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue allows remote attackers to register with an invalid or spoofed e-mail address due to a predictable registration URL. Recommendations At the moment...
PT-2017-15126
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the cusid parameter in the "shopping-cart.ph...
PT-2017-15127
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the companyname...
CVE-2017-17960: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...
CVE-2017-17953: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...
CVE-2017-17952: Improper Input Validation
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-17951: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...
CVE-2017-17954: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...
PT-2017-15128
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to SQL Injection, which occurs via the fid parameter in the "my wishlist.php" API endpoint. Recommendations At the moment, there is no...
PT-2017-15129
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts on the website. This is achieved by exploiting the fid parameter in th...
CVE-2017-17958: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...
PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability
PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...
PHP Scripts Mall Secure E-commerce Script SQL Injection Vulnerability
PHP Scripts Mall Secure E-commerce Script is a set of PHP based e-commerce website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Secure E-commerce Script version 2.0.1. A remote attacker can inject SQL into the category.php file by sending the...
