CVE-2017-17624

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHP Multivendor Ecommerce version 1.0 has an SQL Injection vulnerability via the sid parameter in single_detail.php and the searchcat or chid1 parameters in category.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.