CVE-2017-17959

Critical

Published: 28/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the usid parameter in the seller-view.php file.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to validate and sanitize input data and update the software to the latest version to mitigate the risk.

Original NVD description (English source)

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.