CVE-2017-17959
CriticalSummary
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the usid parameter in the seller-view.php file.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
It is recommended to validate and sanitize input data and update the software to the latest version to mitigate the risk.
Other vulnerabilities in PHP Scripts Mall PHP Multivendor Ecommerce
See all- CVE-2017-17960High
PHP Scripts Mall PHP Multivendor Ecommerce has a CSRF vulnerability via admin/sellerupd.php.
- CVE-2017-17952High
PHP Scripts Mall PHP Multivendor Ecommerce has a predictable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
- CVE-2017-17957Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the fid parameter in my_wishlist.php.
- CVE-2017-17951Critical
PHP Scripts Mall PHP Multivendor Ecommerce is vulnerable to SQL Injection via the cusid parameter in shopping-cart.php.
Original NVD description (English source)
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.