Php Multivendor Ecommerce Project Php Multivendor Ecommerce — known CVE vulnerabilities

Every CVE whose affected-product data names Php Multivendor Ecommerce Project Php Multivendor Ecommerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2017-17957 — CVSS 9.8 (critical): PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
• CVE-2017-17951 — CVSS 9.8 (critical): PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.
• CVE-2017-17624 — CVSS 9.8 (critical): PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
• CVE-2017-17959 — CVSS 9.8 (critical): PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.
• CVE-2017-17960 — CVSS 8.8 (high): PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
• CVE-2017-17952 — CVSS 8.6 (high): PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with…
• CVE-2017-17955 — CVSS 6.1 (medium): PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
• CVE-2017-17956 — CVSS 6.1 (medium): PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.
• CVE-2017-17954 — CVSS 6.1 (medium): PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
• CVE-2017-17958 — CVSS 6.1 (medium): PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
• CVE-2017-17953 — CVSS 6.1 (medium): PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.