Skip to content
OpenAdvisories

Product · joeyrush

PHP-SHOP master

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2018-25397

    PHP-SHOP 1.0 Cross-Site Request Forgery via users.php

    PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms. Attackers can trick authenticated administrators into visiting a page containing a hidden form…

    joeyrush PHP-SHOP master