Executive brief
Smartshop is an e-commerce platform used to manage online stores. A security flaw in the software allows unauthorized individuals to access the underlying database without a password. This could lead to the theft of sensitive customer information, administrative credentials, and other private business data.
Technical details
A SQL injection vulnerability exists in Smartshop 1 due to improper neutralization of user-supplied input in the 'id' and 'searched' parameters. The application directly concatenates GET parameters into SQL queries within category.php, product.php, and search.php without sufficient sanitization or the use of prepared statements. An unauthenticated remote attacker can exploit this by sending crafted GET requests containing UNION-based or time-based blind SQL injection payloads. Successful exploitation allows the attacker to extract sensitive information from the database, including user credentials and database structure. The vulnerability was publicly disclosed in 2018, but formal CVE assignment occurred later.
Affected products
- Smakosh Smartshop 1.0
Timeline
- 2018-06-02: disclosed: Original exploit published on Exploit-DB
- 2026-05-23: advisory: CVE published and assigned by VulnCheck