PT-2025-16210 · Unknown · Scriptandtools Ecommerce-Website-In-Php

Maloyroyorko · Published 2025-04-14 · Updated 2025-07-17 · CVE-2025-3557

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions ScriptAndTools eCommerce-website-in-PHP version 3.0

Description A problematic issue has been identified in ScriptAndTools eCommerce-website-in-PHP. The issue affects some unknown functionality and allows for cross-site request forgery (CSRF). This manipulation can be initiated remotely, and the exploit is publicly available. Multiple endpoints are affected. The vendor was informed of this disclosure but did not respond.

Recommendations For ScriptAndTools eCommerce-website-in-PHP version 3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Missing Authorization

Weakness Enumeration

CWE-352

CWE-862

Related Identifiers

CVE-2025-3557

Affected Products

Scriptandtools Ecommerce-Website-In-Php

References · 13

• 🔥 https://websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_79.html · Exploit
• 🔥 https://websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_3.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-3557 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3557 · Vendor Advisory
• https://vuldb.com/?id.304598 · Note
• https://t.me/cvetracker/21509 · Telegram Post
• https://t.me/cvedetector/22839 · Telegram Post
• https://vuldb.com/?ctiid.304598 · Note
• https://twitter.com/WolfgangSesin/status/1911602077085691944 · Twitter Post
• https://t.me/cvenotify/129345 · Telegram Post
• https://twitter.com/CVEnew/status/1911696070419337532 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1911701962296357122 · Twitter Post
• https://vuldb.com/?submit.551053 · Note