CVE-2018-25336
MEDIUMJoomla jCart for OpenCart 2.3.0.2 Cross-Site Request Forgery
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25336. PoCs published by L0RD.
AI-analyzed exploit summary The exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Joomla! extension jCart for OpenCart 2.3.0.2. It includes functional HTML forms that automatically submit crafted requests to modify user information, passwords, and affiliate account details without user consent.
Description
jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account details when victims visit the attacker-controlled page.
Exploits (1)
The exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Joomla! extension jCart for OpenCart 2.3.0.2. It includes functional HTML forms that automatically submit crafted requests to modify user information, passwords, and affiliate account details without user consent.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N