Php Multivendor Ecommerce Project Multivendor Ecommerce vulnerabilities

• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. CVE-2017-17960 8.8 HighDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter. CVE-2017-17959 9.8 CriticalDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter. CVE-2017-17958 6.1 MediumDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. CVE-2017-17957 9.8 CriticalDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname... CVE-2017-17956 6.1 MediumDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. CVE-2017-17955 6.1 MediumDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. CVE-2017-17954 6.1 MediumDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter. CVE-2017-17953 6.1 MediumDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it... CVE-2017-17952 8.6 HighDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid... CVE-2017-17951 9.8 CriticalDecember 28, 2017
• php multivendor ecommerce project multivendor ecommerce PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the... CVE-2017-17624 Public exploit 9.8 CriticalDecember 13, 2017