PatchTheCVE: php multivendor ecommercehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-17960: PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.https://patchthecve.com/cve/CVE-2017-17960.htmlhttps://patchthecve.com/cve/CVE-2017-17960.htmlWed, 17 Jun 2026 01:11:57 +0000HIGH 8.8: PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.CVE-2017-17959: PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.https://patchthecve.com/cve/CVE-2017-17959.htmlhttps://patchthecve.com/cve/CVE-2017-17959.htmlWed, 17 Jun 2026 01:11:57 +0000CRITICAL 9.8: PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.CVE-2017-17958: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.https://patchthecve.com/cve/CVE-2017-17958.htmlhttps://patchthecve.com/cve/CVE-2017-17958.htmlWed, 17 Jun 2026 01:11:57 +0000MEDIUM 6.1: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.CVE-2017-17957: PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.https://patchthecve.com/cve/CVE-2017-17957.htmlhttps://patchthecve.com/cve/CVE-2017-17957.htmlWed, 17 Jun 2026 01:11:57 +0000CRITICAL 9.8: PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.CVE-2017-17956: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.https://patchthecve.com/cve/CVE-2017-17956.htmlhttps://patchthecve.com/cve/CVE-2017-17956.htmlWed, 17 Jun 2026 01:11:57 +0000MEDIUM 6.1: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.CVE-2017-17955: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.https://patchthecve.com/cve/CVE-2017-17955.htmlhttps://patchthecve.com/cve/CVE-2017-17955.htmlWed, 17 Jun 2026 01:11:57 +0000MEDIUM 6.1: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.CVE-2017-17954: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.https://patchthecve.com/cve/CVE-2017-17954.htmlhttps://patchthecve.com/cve/CVE-2017-17954.htmlWed, 17 Jun 2026 01:11:57 +0000MEDIUM 6.1: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.CVE-2017-17953: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.https://patchthecve.com/cve/CVE-2017-17953.htmlhttps://patchthecve.com/cve/CVE-2017-17953.htmlWed, 17 Jun 2026 01:11:57 +0000MEDIUM 6.1: PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.CVE-2017-17952: PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remotehttps://patchthecve.com/cve/CVE-2017-17952.htmlhttps://patchthecve.com/cve/CVE-2017-17952.htmlWed, 17 Jun 2026 01:11:56 +0000HIGH 8.6: PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.CVE-2017-17951: PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.https://patchthecve.com/cve/CVE-2017-17951.htmlhttps://patchthecve.com/cve/CVE-2017-17951.htmlWed, 17 Jun 2026 01:11:56 +0000CRITICAL 9.8: PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.CVE-2017-17624: PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php shttps://patchthecve.com/cve/CVE-2017-17624.htmlhttps://patchthecve.com/cve/CVE-2017-17624.htmlWed, 17 Jun 2026 01:11:23 +0000CRITICAL 9.8: PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.