CVE-2017-17957

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...

Sql injection

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...

Code injection

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...

CVE-2017-17958

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...

CVE-2017-17959

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

CVE-2017-17951

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...

CVE-2017-17953

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...

Cross site request forgery (csrf)

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...

CVE-2017-17955

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...

Sql injection

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...

Design/Logic Flaw

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter...

Code injection

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...

Sql injection

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter...

Code injection

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...

CVE-2017-17960

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...

CVE-2017-17954

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...

CVE-2017-17957

The CVE-2017-17957 vulnerability affects PHP Scripts Mall PHP Multivendor Ecommerce, where the my_wishlist.php fid parameter is susceptible to SQL injection. This issue enables an attacker to inject arbitrary SQL via the parameter, as reported in multiple feeds referencing a SQL injection flaw in...

CVE-2017-17955

The CVE-2017-17955 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce and is supported by multiple connected records showing an XSS vulnerability in the shopping-cart.php cusid parameter. The exploitable vector is a reflected/persistent cross-site scripting via that parameter, but explicit...

CVE-2017-17958

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...

CVE-2017-17953

The CVE-2017-17953 entry applies to PHP Scripts Mall PHP Multivendor Ecommerce. A cross-site scripting (XSS) vulnerability exists in the category.phpchid1 parameter, enabling script injection. This is the underlying issue described across multiple sources (NVD/Red Hat/CNVD/etc.). The exact impact...