CVE-2017-17951

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall PHP Multivendor Ecommerce (affected versions not specified)

Description The issue concerns a SQL Injection vulnerability. It is exploited via the cusid parameter in the "shopping-cart.php" endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.