PT-2025-53320 · Carlo Gavazzi · Smarthouse Webapp

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25234

NVD

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious scripts into various application parameters.

Exploit

Fix

CSRF

XSS

Weakness Enumeration

CWE-352

CWE-79

Related Identifiers

CVE-2019-25234

Affected Products

Smarthouse Webapp

References · 4

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5543.php · Exploit
• 🔥 https://exploit-db.com/exploits/47730 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25234 · Security Note
• http://smarthouse.nu · Note