Vulnerabilities > PHP Multivendor Ecommerce Project > PHP Multivendor Ecommerce > High

DATE	CVE	VULNERABILITY TITLE	RISK
2017-12-28	CVE-2017-17960	Cross-Site Request Forgery (CSRF) vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. network low complexity php-multivendor-ecommerce-project CWE-352	8.8
2017-12-28	CVE-2017-17952	Improper Input Validation vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address. network low complexity php-multivendor-ecommerce-project CWE-20	8.6

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.