CVE Feed

    Dashboard / CVE / CVE-2017-17955

    CVE-2017-17955

    PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.

    Published:Dec 28, 2017
    Last Modified:Apr 20, 2025
    EPS:Dec 28, 2017
    EPSS Score:0.0024
    CVSS Score:6.1

    Affected Products

    Vendor
    Php Multivendor Ecommerce Project
    Product
    Php Multivendor Ecommerce

    Exploits

    https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.mdhttps://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.md

    Related CVEs

    CVE-2017-17952 (CVSS 8.6) — PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote…
    CVE-2017-17953 (CVSS 6.1) — PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.…
    CVE-2017-17959 (CVSS 9.8) — PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.…
    CVE-2017-17960 (CVSS 8.8) — PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.…
    CVE-2017-17957 (CVSS 9.8) — PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.…
    CVE-2017-17958 (CVSS 6.1) — PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.…
    CVE-2017-17951 (CVSS 9.8) — PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.…
    CVE-2017-17954 (CVSS 6.1) — PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.…
    CVE-2017-17956 (CVSS 6.1) — PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.…
    CVE-2017-17624 (CVSS 9.8) — PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php s…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High