CVE-2018-25342
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Smartshop 1 contains a time-based blind SQL injection vulnerability allowing unauthenticated attackers to manipulate database queries via the 'searched' parameter in search.php. Attackers can send GET requests with SQL payloads like SLEEP to extract sensitive data.
Risk Assessment
An attacker can extract confidential information such as product details and system data, leading to privacy and data integrity breaches.
Recommendation
Update Smartshop to the latest version or apply a security patch; if unavailable, consider migrating to another solution.
Other vulnerabilities in Smartshop
See all- CVE-2018-25343Medium
CSRF vulnerability in Smartshop 1. An attacker can trick an authenticated admin into modifying their profile, including email and password.
- CVE-2018-25341High
Smartshop 1 contains a SQL injection vulnerability allowing unauthenticated attackers to execute arbitrary SQL queries via the id parameter in product.php. Attackers can send GET requests with union-based SQL payloads to extract sensitive data like usernames and database names.
- CVE-2018-25340High
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to category.php with UNION-based SQL injection payloads in the id parameter to extract sensitive database information including usernames.
Original NVD description (English source)
Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched' parameter in search.php. Attackers can send GET requests with malicious SQL payloads like SLEEP commands to extract sensitive database information including product details and system data.