PT-2025-16210 · Unknown · Scriptandtools Ecommerce-Website-In-Php

Maloyroyorko · Publicado 2025-04-14 · Atualizado 2025-07-17 · CVE-2025-3557

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions ScriptAndTools eCommerce-website-in-PHP version 3.0

Description A problematic issue has been identified in ScriptAndTools eCommerce-website-in-PHP. The issue affects some unknown functionality and allows for cross-site request forgery (CSRF). This manipulation can be initiated remotely, and the exploit is publicly available. Multiple endpoints are affected. The vendor was informed of this disclosure but did not respond.

Recommendations For ScriptAndTools eCommerce-website-in-PHP version 3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Missing Authorization

Enumeração de Fraquezas

CWE-352

CWE-862

Identificadores relacionados

CVE-2025-3557

Produtos afetados

Scriptandtools Ecommerce-Website-In-Php

Referências · 13

• 🔥 https://websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_79.html · Exploit
• 🔥 https://websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_3.html · Exploit
• https://vuldb.com/?id.304598 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-3557 · Nota de Segurança
• https://t.me/cvetracker/21509 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-3557 · Aviso do Fabricante
• https://t.me/cvedetector/22839 · Publicação no Telegram
• https://vuldb.com/?ctiid.304598 · Nota
• https://twitter.com/WolfgangSesin/status/1911602077085691944 · Publicação no Twitter
• https://t.me/cvenotify/129345 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1911696070419337532 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1911701962296357122 · Publicação no Twitter
• https://vuldb.com/?submit.551053 · Nota