PT-2017-14920

Name of the Vulnerable Software and Affected Versions PHP Multivendor Ecommerce version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "single detail.php" page using the sid parameter, or through the "category.php" page using the searchcat or chid1 parameters...

PT-2017-14925

Name of the Vulnerable Software and Affected Versions Secure E-commerce Script version 2.0.1 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include searchmain or searchcat in the "category.php" endpoint,...