Back to CVE Browser

CVE-2017-17957

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0550%

EPSS Percentile25.74th

PublishedDec 28, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.

Affected Platforms (CPE)

📦

Php Multivendor Ecommerce Project

Php Multivendor Ecommerce

All versions

References & Advisories

🔗 https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md

🔗 https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md

Related Vulnerabilities

CVE-2017-179599.8

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.

CVE-2017-176249.8

PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 pa...

CVE-2017-179519.8

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.

CVE-2017-179608.8

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.