CVE:CVE-2017-17936
CNNVD:CNNVD-201712-1059
Vanguard Marketplace Digital Products PHP是一套基于PHP的MP3等数字文件在线交易网站脚本。
Vanguard Marketplace Digital Products PHP中存在跨站请求伪造漏洞。远程攻击者可借助/search利用该漏洞注入Web脚本或HTML或执行更改操作。
solution:Upgrade vanguard_project marketplace_digital_products_php to a higher version than 1.9,and avoid the version (,1.9]