Vulnerabilities > PHP Multivendor Ecommerce Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-12-28 | CVE-2017-17960 | Cross-Site Request Forgery (CSRF) vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. | 8.8 |
| 2017-12-28 | CVE-2017-17959 | SQL Injection vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter. | 9.8 |
| 2017-12-28 | CVE-2017-17958 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17957 | SQL Injection vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. | 9.8 |
| 2017-12-28 | CVE-2017-17956 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17955 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17954 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17953 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17952 | Improper Input Validation vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address. | 8.6 |
| 2017-12-28 | CVE-2017-17951 | SQL Injection vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter. | 9.8 |