CVEブラウザに戻る

CVE-2017-17624

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0330%

EPSS Percentile17.84th

Published2017年12月13日

Last Modified2026年5月13日

Vulnerability Description

PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.

Affected Platforms (CPE)

📦

Php Multivendor Ecommerce Project

Php Multivendor Ecommerce

= 1.0

References & Advisories

🔗 https://packetstormsecurity.com/files/145336/PHP-Multivendor-Ecommerce-1.0-SQL-Injection.html

🔗 https://www.exploit-db.com/exploits/43293/

🔗 https://packetstormsecurity.com/files/145336/PHP-Multivendor-Ecommerce-1.0-SQL-Injection.html

🔗 https://www.exploit-db.com/exploits/43293/

関連する脆弱性情報

CVE-2017-179579.8

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.

CVE-2017-179599.8

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.

CVE-2017-179519.8

PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.

CVE-2017-179608.8

PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.