PHP Multivendor Ecommerce Project

11 CVEs across 1 PHP Multivendor Ecommerce Project products. Browse PHP Multivendor Ecommerce Project vulnerabilities, severities, and proof-of-concept exploits.

PHP Multivendor Ecommerce Project products with known CVEs

Product	CVEs
PHP Multivendor Ecommerce	11

PHP Multivendor Ecommerce Project CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2017-17960`	High	`8.8`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
`CVE-2017-17959`	Critical	`9.8`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.
`CVE-2017-17958`	Medium	`6.1`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
`CVE-2017-17957`	Critical	`9.8`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
`CVE-2017-17956`	Medium	`6.1`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.
`CVE-2017-17955`	Medium	`6.1`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
`CVE-2017-17954`	Medium	`6.1`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
`CVE-2017-17953`	Medium	`6.1`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
`CVE-2017-17952`	High	`8.6`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed…
`CVE-2017-17951`	Critical	`9.8`	2017-12-28	PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.
`CVE-2017-17624`	Critical	`9.8`	2017-12-13	PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.