CVE-2017-17952
HighSummary
PHP Scripts Mall PHP Multivendor Ecommerce has a predictable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
Risk Assessment
Attackers can exploit this vulnerability to register accounts with fake information, potentially leading to abuse within the system.
Recommendation
It is recommended to implement additional email verification mechanisms during registration to minimize the risk of abuse.
Other vulnerabilities in PHP Scripts Mall PHP Multivendor Ecommerce
See all- CVE-2017-17960High
PHP Scripts Mall PHP Multivendor Ecommerce has a CSRF vulnerability via admin/sellerupd.php.
- CVE-2017-17959Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the usid parameter in the seller-view.php file.
- CVE-2017-17957Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the fid parameter in my_wishlist.php.
- CVE-2017-17951Critical
PHP Scripts Mall PHP Multivendor Ecommerce is vulnerable to SQL Injection via the cusid parameter in shopping-cart.php.
Original NVD description (English source)
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.