CVE-2017-17951

Critical

Published: 28/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall PHP Multivendor Ecommerce is vulnerable to SQL Injection via the cusid parameter in shopping-cart.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to validate and sanitize input data in the cusid parameter and to update the software to the latest version.

Original NVD description (English source)

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.