Vendors / Php Multivendor Ecommerce Project Php Multivendor Ecommerce Project Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 2
Exploited now Php Multivendor Ecommerce Project records in CISA KEV No Php Multivendor Ecommerce Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0305 · Published 2017-12-13 · No fix listed CWE-89
Priority MEDIUM 44
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01161 · Published 2017-12-28 · No fix listed CWE-89
Priority MEDIUM 44
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01161 · Published 2017-12-28 · No fix listed CWE-89
Priority MEDIUM 44
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01161 · Published 2017-12-28 · No fix listed CWE-89
Priority MEDIUM 40
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
CVSS 3.0 HIGH 8.6· Network · No auth · No interaction · EPSS 0.01136 · Published 2017-12-28 · No fix listed CWE-20
Priority LOW 39
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00505 · Published 2017-12-28 · No fix listed CWE-352
Priority LOW 28
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-12-28 · No fix listed CWE-79
Priority LOW 28
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-12-28 · No fix listed CWE-79
Priority LOW 28
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-12-28 · No fix listed CWE-79
Priority LOW 28
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-12-28 · No fix listed CWE-79
Priority LOW 28
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-12-28 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 2 5 0 0
THREATIST.IORead the docs