Read the docs

Behance

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Behance records in CISA KEV

No Behance vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2018-15567 CVE-2018-25342 · GHSA-38q9-6v4m-v3h3

Smartshop 1 SQL Injection via search.php

Priority HIGH 77

Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched' parameter in search.php.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-23 No fix listed CWE-89
TI-2018-15566 CVE-2018-25341 · GHSA-2g5c-v49p-7c89

Smartshop 1 SQL Injection via product.php id Parameter

Priority HIGH 77

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-23 No fix listed CWE-89
TI-2018-15565 CVE-2018-25340 · GHSA-jxhh-fr4g-23jx

Smartshop 1 SQL Injection via category.php

Priority HIGH 77

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-23 No fix listed CWE-89
TI-2018-15568 CVE-2018-25343 · GHSA-6pf6-cr9h-j56p

Smartshop 1 Cross-Site Request Forgery via editprofile.php

Priority MEDIUM 57

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00132 Published 2026-05-23 No fix listed CWE-352
Open these records in search →