CVE-2018-25343
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
CSRF vulnerability in Smartshop 1. An attacker can trick an authenticated admin into modifying their profile, including email and password.
Risk Assessment
An attacker could take over the admin account, leading to full system compromise.
Recommendation
Update Smartshop to the latest version or implement CSRF protection mechanisms.
Other vulnerabilities in Smartshop
See all- CVE-2018-25342High
Smartshop 1 contains a time-based blind SQL injection vulnerability allowing unauthenticated attackers to manipulate database queries via the 'searched' parameter in search.php. Attackers can send GET requests with SQL payloads like SLEEP to extract sensitive data.
- CVE-2018-25341High
Smartshop 1 contains a SQL injection vulnerability allowing unauthenticated attackers to execute arbitrary SQL queries via the id parameter in product.php. Attackers can send GET requests with union-based SQL payloads to extract sensitive data like usernames and database names.
- CVE-2018-25340High
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to category.php with UNION-based SQL injection payloads in the id parameter to extract sensitive database information including usernames.
Original NVD description (English source)
Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that execute automatically when visited by an authenticated admin user.