CVE-2017-17986

CVE-2017-17986 affects PHP Scripts Mall Muslim Matrimonial Script, with a cross-site scripting vulnerability exposed via the admin/caste_view.php comm_id parameter. The connected CNVD and NVD records confirm the issue as XSS; no active exploit status or concrete remediation is provided in the sup...

CVE-2017-17988

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventadd.php eventtitle parameter...

CVE-2017-17984

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...

CVE-2017-17985

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/stateview.php couid parameter...

CVE-2017-17985

The Muslim Matrimonial Script from PHP Scripts Mall is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the admin/state_view.php cou_id parameter. Multiple sources (NVD entry CVE-2017-17985, CNVD-2018-01241) confirm XSS through this parameter, indicating input is not properly sa...

CVE-2017-17986

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/casteview.php commid parameter...

CVE-2017-17987

CVE-2017-17987 affects PHP Scripts Mall’s Muslim Matrimonial Script. The vulnerability is an arbitrary file upload via admin/mydetails_edit.php , enabling upload of unrestricted files. Connected CNVD entry corroborates the arbitrary file upload issue. No exploit specifics or remediation details a...

CVE-2017-17984

The CVE-2017-17984 entry concerns PHP Scripts Mall’s Muslim Matrimonial Script, which is reported to have a Cross-Site Scripting (XSS) vulnerability via the admin/event_edit.php edit_id parameter. Connected sources (CNVD-2018-01242 and NVD) confirm an XSS flaw in this script; the vulnerability af...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00081)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00088)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability (CNVD-2018-00078)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. PHP Scripts Mall PHP Multivendor Ecommerce suffers from a SQL injection vulnerability. The vulnerability can be exploited by an...

CVE-2017-17956

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...

Cross site request forgery (csrf)

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...

CVE-2017-17956

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...

CVE-2017-17952

The CVE-2017-17952 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, where a predicable registration URL enables remote attackers to complete registrations using invalid or spoofed email addresses. Connected sources (Red Hat, CNVD, CNVD CNVD-2018, PRION, CVE lists, etc.) corroborate the ...

CVE-2017-17954

The vulnerability concerns PHP Scripts Mall PHP Multivendor Ecommerce. A cross-site scripting (XSS) flaw exists in the seller-view.php usid parameter. The available documents identify the affected software and the vulnerable parameter but do not provide details on root-cause specifics beyond XSS,...

CVE-2017-17959

The CVE-2017-17959 vulnerability affects PHP Scripts Mall PHP Multivendor Ecommerce and is caused by a SQL Injection in the seller-view.php usid parameter. The issue has publicly reported impact metrics: CVSS v2 base score 7.5 (HIGH) with network attack vector, low complexity, and partial confide...

CVE-2017-17952

PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...

CVE-2017-17951

The CVE-2017-17951 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, with a documented SQL Injection vulnerability in the shopping-cart.php cusid parameter. The issue is a SQL injection in the cart flow likely due to improper handling of the cusid input in SQL queries (root cause: unsafe...