Approved changes feed: RSS · Atom

cpe:2.3:a:ordermanagementscript:professional_service_script:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOrdermanagementscript (20bce018-22ff-56ef-a270-4973a1e3215d)
ProductProfessional Service Script (71eed9a3-430b-5c9e-b83d-9fa859244947)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17930 vulnerable 2026-06-08 05:09:10.100010 Details available
PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.
Published: 2017-12-26T22:00:00.000Z
Updated: 2024-08-05T21:06:49.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17929 vulnerable 2026-06-08 05:09:10.099751 Details available
PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.
Published: 2017-12-26T22:00:00.000Z
Updated: 2024-08-05T21:06:49.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17928 vulnerable 2026-06-08 05:09:10.099495 Details available
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.
Published: 2017-12-26T22:00:00.000Z
Updated: 2024-08-05T21:06:49.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17927 vulnerable 2026-06-08 05:09:10.099223 Details available
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/.
Published: 2017-12-26T22:00:00.000Z
Updated: 2024-08-05T21:06:49.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17926 vulnerable 2026-06-08 05:09:10.098943 Details available
PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
Published: 2017-12-26T22:00:00.000Z
Updated: 2024-08-05T21:06:49.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17925 vulnerable 2026-06-08 05:09:10.098641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17924 vulnerable 2026-06-08 05:09:10.098257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.