Skip to content
OpenAdvisories

Vendor

Behance

4 known vulnerabilities.

Products

Smartshop 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2018-25342

    Smartshop 1 SQL Injection via search.php

    Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched' parameter in search.php. Attackers can send GET requests with malicious SQL p…

    Behance Smartshop
  • High 8.2
    CVE-2018-25341

    Smartshop 1 SQL Injection via product.php id Parameter

    Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to product.php with union-based SQL injection paylo…

    Behance Smartshop
  • High 8.2
    CVE-2018-25340

    Smartshop 1 SQL Injection via category.php

    Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to category.php with UNION-based SQL injection payl…

    Behance Smartshop