CVE-2017-17624

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-176259.8Professional Service Script 1.0 has SQL Injection via the service-list city parameter.CVE-2017-176269.8Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.CVE-2017-176279.8Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.CVE-2017-176289.8Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.CVE-2017-176299.8Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_detail.php sid parameCVE-2017-176309.8Yoga Class Script 1.0 has SQL Injection via the /list city parameter.CVE-2017-176319.8Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.CVE-2017-176329.8Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.CVE-2017-176339.8Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or eCVE-2017-176349.8Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.CVE-2017-176359.8MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.CVE-2017-176369.8MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.
CVE-2017-17624: Critical severity, CVSS 9.8 | Vulnix