CVE-2018-25340
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to category.php with UNION-based SQL injection payloads in the id parameter to extract sensitive database information including usernames.
Risk Assessment
The risk includes unauthorized access to sensitive data such as user credentials, potentially leading to confidentiality and integrity breaches.
Recommendation
Immediately update Smartshop to the latest version or apply a patch fixing the SQL injection vulnerability, and conduct a code audit for similar flaws.
Other vulnerabilities in Smartshop
See all- CVE-2018-25343Medium
CSRF vulnerability in Smartshop 1. An attacker can trick an authenticated admin into modifying their profile, including email and password.
- CVE-2018-25342High
Smartshop 1 contains a time-based blind SQL injection vulnerability allowing unauthenticated attackers to manipulate database queries via the 'searched' parameter in search.php. Attackers can send GET requests with SQL payloads like SLEEP to extract sensitive data.
- CVE-2018-25341High
Smartshop 1 contains a SQL injection vulnerability allowing unauthenticated attackers to execute arbitrary SQL queries via the id parameter in product.php. Attackers can send GET requests with union-based SQL payloads to extract sensitive data like usernames and database names.
Original NVD description (English source)
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to category.php with UNION-based SQL injection payloads in the id parameter to extract sensitive database information including usernames and other data.