CVE-2017-17937中 6.1Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
CVE-2017-17874高 8.8Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, whi…
CVE-2017-17873緊急 9.8Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.