CVE-2017-17960
HighSummary
PHP Scripts Mall PHP Multivendor Ecommerce has a CSRF vulnerability via admin/sellerupd.php.
Risk Assessment
An attacker could exploit this vulnerability to perform unauthorized actions on behalf of a logged-in administrator or seller.
Recommendation
It is recommended to implement CSRF tokens in forms and validate requests to minimize the risk of such attacks.
Other vulnerabilities in PHP Scripts Mall PHP Multivendor Ecommerce
See all- CVE-2017-17952High
PHP Scripts Mall PHP Multivendor Ecommerce has a predictable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
- CVE-2017-17959Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the usid parameter in the seller-view.php file.
- CVE-2017-17957Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the fid parameter in my_wishlist.php.
- CVE-2017-17951Critical
PHP Scripts Mall PHP Multivendor Ecommerce is vulnerable to SQL Injection via the cusid parameter in shopping-cart.php.
Original NVD description (English source)
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.