CVE-2017-17936
HighSummary
Vanguard Marketplace Digital Products PHP has a CSRF vulnerability that occurs at the /search endpoint.
Risk Assessment
An attacker could exploit this vulnerability to perform unauthorized actions on behalf of the user, potentially leading to data loss or unauthorized access.
Recommendation
It is recommended to implement CSRF tokens in forms and verify the origin of requests to secure the application.
Other vulnerabilities in Vanguard Marketplace Digital Products PHP
See all- CVE-2017-17874High
Vanguard Marketplace Digital Products PHP version 1.4 allows arbitrary file upload via an 'Add a new product' or 'Add a product preview' action, which can make a .php file accessible under an uploads/ URI.
- CVE-2017-17873Critical
Vanguard Marketplace Digital Products PHP version 1.4 is vulnerable to SQL Injection via the PATH_INFO parameter in the /p URI.
Original NVD description (English source)
Vanguard Marketplace Digital Products PHP has CSRF via /search.