1908 matches found
CVE-2017-17984
The CVE-2017-17984 entry concerns PHP Scripts Mall’s Muslim Matrimonial Script, which is reported to have a Cross-Site Scripting (XSS) vulnerability via the admin/event_edit.php edit_id parameter. Connected sources (CNVD-2018-01242 and NVD) confirm an XSS flaw in this script; the vulnerability af...
CVE-2017-17983
The PHP Scripts Mall Muslim Matrimonial Script is affected by an SQL injection in view-profile.php mem_id parameter. Root cause: unsafe SQL construction from user-supplied mem_id. Documented impact in CVSS: High (confidentiality, integrity, and availability). CVSS3 base score: 8.8. No remediation...
CVE-2017-17982
The Muslim Matrimonial Script by PHP Scripts Mall is affected by a Cross-Site Request Forgery (CSRF) vulnerability via admin/subadmin_edit.php. Multiple sources (NVD, CNVD, PRION/CVELIST) corroborate CSRF on that endpoint. No concrete exploitation details, patch/version fixes, or explicit remedia...
CVE-2017-17987
CVE-2017-17987 affects PHP Scripts Mall’s Muslim Matrimonial Script. The vulnerability is an arbitrary file upload via admin/mydetails_edit.php , enabling upload of unrestricted files. Connected CNVD entry corroborates the arbitrary file upload issue. No exploit specifics or remediation details a...
CVE-2017-17983
PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...
PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability (CNVD-2018-00078)
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. PHP Scripts Mall PHP Multivendor Ecommerce suffers from a SQL injection vulnerability. The vulnerability can be exploited by an...
PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00081)
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...
PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Request Forgery Vulnerability
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site request forgery vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. An attacker can exploit this...
PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00088)
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...
PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...
CVE-2017-17956
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...
Cross site request forgery (csrf)
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...
CVE-2017-17954
The vulnerability concerns PHP Scripts Mall PHP Multivendor Ecommerce. A cross-site scripting (XSS) flaw exists in the seller-view.php usid parameter. The available documents identify the affected software and the vulnerable parameter but do not provide details on root-cause specifics beyond XSS,...
CVE-2017-17959
The CVE-2017-17959 vulnerability affects PHP Scripts Mall PHP Multivendor Ecommerce and is caused by a SQL Injection in the seller-view.php usid parameter. The issue has publicly reported impact metrics: CVSS v2 base score 7.5 (HIGH) with network attack vector, low complexity, and partial confide...
CVE-2017-17956
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...
CVE-2017-17952
The CVE-2017-17952 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, where a predicable registration URL enables remote attackers to complete registrations using invalid or spoofed email addresses. Connected sources (Red Hat, CNVD, CNVD CNVD-2018, PRION, CVE lists, etc.) corroborate the ...
CVE-2017-17952
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-17951
The CVE-2017-17951 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, with a documented SQL Injection vulnerability in the shopping-cart.php cusid parameter. The issue is a SQL injection in the cart flow likely due to improper handling of the cusid input in SQL queries (root cause: unsafe...