CVE-2017-17930

High

Published: 27/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall Professional Service Script is vulnerable to CSRF via admin/general_settingupd.php, allowing modification of settings in the user panel.

Risk Assessment

An attacker could exploit this vulnerability to make unauthorized changes to settings, potentially leading to serious security implications.

Recommendation

It is recommended to implement CSRF tokens in forms and to monitor and restrict access to critical administrative files.

Other vulnerabilities in PHP Scripts Mall Professional Service Script

CVE-2017-17928Critical
PHP Scripts Mall Professional Service Script is vulnerable to SQL injection via the id parameter in admin/review.php.

Original NVD description (English source)

PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.