4 matches found
CVE-2017-17956
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...
CVE-2017-17960
The CVE-2017-17960 entry concerns PHP Scripts Mall PHP Multivendor Ecommerce and a CSRF vulnerability via admin/sellerupd.php. The connected records consistently identify a cross-site request forgery issue without detailing affected versions or root cause beyond the vulnerability type. Exploitati...
CVE-2017-17960: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php...
CVE-2017-17956: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter...