CVE-2017-17986

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/casteview.php commid parameter...

CVE-2017-17982

PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadminedit.php...

CVE-2017-17987

PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetailsedit.php...

CVE-2017-17986

CVE-2017-17986 affects PHP Scripts Mall Muslim Matrimonial Script, with a cross-site scripting vulnerability exposed via the admin/caste_view.php comm_id parameter. The connected CNVD and NVD records confirm the issue as XSS; no active exploit status or concrete remediation is provided in the sup...

CVE-2017-17985

The Muslim Matrimonial Script from PHP Scripts Mall is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the admin/state_view.php cou_id parameter. Multiple sources (NVD entry CVE-2017-17985, CNVD-2018-01241) confirm XSS through this parameter, indicating input is not properly sa...

CVE-2017-17983

PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php memid parameter...

CVE-2017-17984

The CVE-2017-17984 entry concerns PHP Scripts Mall’s Muslim Matrimonial Script, which is reported to have a Cross-Site Scripting (XSS) vulnerability via the admin/event_edit.php edit_id parameter. Connected sources (CNVD-2018-01242 and NVD) confirm an XSS flaw in this script; the vulnerability af...

CVE-2017-17987

CVE-2017-17987 affects PHP Scripts Mall’s Muslim Matrimonial Script. The vulnerability is an arbitrary file upload via admin/mydetails_edit.php , enabling upload of unrestricted files. Connected CNVD entry corroborates the arbitrary file upload issue. No exploit specifics or remediation details a...

PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability (CNVD-2018-00078)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. PHP Scripts Mall PHP Multivendor Ecommerce suffers from a SQL injection vulnerability. The vulnerability can be exploited by an...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00088)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00081)

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability

PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...

CVE-2017-17956

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...

Cross site request forgery (csrf)

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...

CVE-2017-17959

The CVE-2017-17959 vulnerability affects PHP Scripts Mall PHP Multivendor Ecommerce and is caused by a SQL Injection in the seller-view.php usid parameter. The issue has publicly reported impact metrics: CVSS v2 base score 7.5 (HIGH) with network attack vector, low complexity, and partial confide...

CVE-2017-17954

The vulnerability concerns PHP Scripts Mall PHP Multivendor Ecommerce. A cross-site scripting (XSS) flaw exists in the seller-view.php usid parameter. The available documents identify the affected software and the vulnerable parameter but do not provide details on root-cause specifics beyond XSS,...

CVE-2017-17952

The CVE-2017-17952 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, where a predicable registration URL enables remote attackers to complete registrations using invalid or spoofed email addresses. Connected sources (Red Hat, CNVD, CNVD CNVD-2018, PRION, CVE lists, etc.) corroborate the ...

CVE-2017-17952

PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...

CVE-2017-17956

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...

CVE-2017-17951

The CVE-2017-17951 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce, with a documented SQL Injection vulnerability in the shopping-cart.php cusid parameter. The issue is a SQL injection in the cart flow likely due to improper handling of the cusid input in SQL queries (root cause: unsafe...