PHP Scripts Mall PHP Multivendor Ecommerce vulnerabilities
5 known CVE vulnerabilities in PHP Scripts Mall PHP Multivendor Ecommerce, translated and rated.
- CVE-2017-17960High
PHP Scripts Mall PHP Multivendor Ecommerce has a CSRF vulnerability via admin/sellerupd.php.
- CVE-2017-17952High
PHP Scripts Mall PHP Multivendor Ecommerce has a predictable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
- CVE-2017-17959Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the usid parameter in the seller-view.php file.
- CVE-2017-17957Critical
PHP Scripts Mall PHP Multivendor Ecommerce has an SQL Injection vulnerability via the fid parameter in my_wishlist.php.
- CVE-2017-17951Critical
PHP Scripts Mall PHP Multivendor Ecommerce is vulnerable to SQL Injection via the cusid parameter in shopping-cart.php.

