PHP Multivendor Ecommerce Project maintains a focused ecommerce platform that, despite limited product scope, is deployed across a notable range of online marketplaces and vendor-driven storefronts. Vulnerabilities affecting this platform skew strongly toward critical severity and concentrate in web-application input-handling and request-validation classes—cross-site scripting, SQL injection, cross-site request forgery, and improper input validation—that are endemic to server-side PHP applications managing user-generated content and payment workflows. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Php Multivendor Ecommerce Project over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-17624CRITICAL PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter. | Dec 13, 2017 | 9.8 | 41 | NO | YES |
CVE-2017-17959CRITICAL PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter. | Dec 28, 2017 | 9.8 | 28 | NO | NO |
CVE-2017-17957CRITICAL PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. | Dec 28, 2017 | 9.8 | 28 | NO | NO |
CVE-2017-17951CRITICAL PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter. | Dec 28, 2017 | 9.8 | 28 | NO | NO |
CVE-2017-17960HIGH PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. | Dec 28, 2017 | 8.8 | 26 | NO | NO |
CVE-2017-17952HIGH PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address. | Dec 28, 2017 | 8.6 | 25 | NO | NO |
CVE-2017-17958MEDIUM PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter. | Dec 28, 2017 | 6.1 | 20 | NO | NO |
CVE-2017-17956MEDIUM PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter. | Dec 28, 2017 | 6.1 | 20 | NO | NO |
CVE-2017-17955MEDIUM PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. | Dec 28, 2017 | 6.1 | 20 | NO | NO |
CVE-2017-17954MEDIUM PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. | Dec 28, 2017 | 6.1 | 20 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Php Multivendor Ecommerce Project.
Media articles that mention a CVE ID that affects a product developed by Php Multivendor Ecommerce Project — matched by CVE ID, not by vendor name.