Security Advisory
CVE-2017-17624
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.