Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Behance Clear all filters
TI-2018-15568 CVE-2018-25343 · GHSA-6pf6-cr9h-j56p

Smartshop 1 Cross-Site Request Forgery via editprofile.php

Priority MEDIUM 57

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00132 Published 2026-05-23 No fix listed CWE-352
TI-2018-15567 CVE-2018-25342 · GHSA-38q9-6v4m-v3h3

Smartshop 1 SQL Injection via search.php

Priority HIGH 77

Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched' parameter in search.php.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-23 No fix listed CWE-89
TI-2018-15566 CVE-2018-25341 · GHSA-2g5c-v49p-7c89

Smartshop 1 SQL Injection via product.php id Parameter

Priority HIGH 77

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-23 No fix listed CWE-89
TI-2018-15565 CVE-2018-25340 · GHSA-jxhh-fr4g-23jx

Smartshop 1 SQL Injection via category.php

Priority HIGH 77

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-23 No fix listed CWE-89