Home/Product/php multivendor ecommerce project php multivendor ecommerce
Product

php multivendor ecommerce project php multivendor ecommerce

11 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2017-17960
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
8.8HIGH
 CVE-2017-17959
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.
9.8CRITICAL
 CVE-2017-17958
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
6.1MEDIUM
 CVE-2017-17957
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
9.8CRITICAL
 CVE-2017-17956
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.
6.1MEDIUM
 CVE-2017-17955
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
6.1MEDIUM
 CVE-2017-17954
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
6.1MEDIUM
 CVE-2017-17953
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
6.1MEDIUM
 CVE-2017-17952
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to regist
8.6HIGH
 CVE-2017-17951
all versions
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.
9.8CRITICAL
 CVE-2017-17624
all versions
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 pa
9.8CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin