CVE-2017-17952

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.

Metrics

CVSS 3.0 8.6/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.mdExploit, Third Party Advisory
https://github.com/d4wner/Vulnerabilities-Report/blob/master/PHP%20Multivendor%20Ecommerce.mdExploit, Third Party Advisory

Timeline

Published: Dec 28, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017