CVE-2017-17951
CriticalSummary
PHP Scripts Mall PHP Multivendor Ecommerce is vulnerable to SQL Injection via the cusid parameter in shopping-cart.php.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
It is recommended to validate and sanitize input data in the cusid parameter and to update the software to the latest version.
Other vulnerabilities in PHP Scripts Mall PHP Multivendor Ecommerce
See all- CVE-2017-17960High
PHP Scripts Mall PHP Multivendor Ecommerce has a CSRF vulnerability via admin/sellerupd.php.
- CVE-2017-17952High
PHP Scripts Mall PHP Multivendor Ecommerce has a predictable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
- CVE-2017-17959Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the usid parameter in the seller-view.php file.
- CVE-2017-17957Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the fid parameter in my_wishlist.php.
Original NVD description (English source)
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.