PT-2017-15129

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts on the website. This is achieved by exploiting the fid parameter in th...

PT-2017-15128

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce affected versions not specified Description The issue is related to SQL Injection, which occurs via the fid parameter in the "my wishlist.php" API endpoint. Recommendations At the moment, there is no...