CyberRota
Back to database

CVE-2018-25343

MEDIUM · CVSS 4.3 EPSS 0.16% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-23 · Last synced: 2026-06-20

CyberRota Analysis

Saldırganın giriş yapmış olması gerekebilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗
External Security References
exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-25343
Severity
MEDIUM
CVSS
4.3
EPSS
0.16%

Original NVD Description

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that execute automatically when visited by an authenticated admin user.