BaseFortify

Publication date: 2025-11-16

Last updated on: 2026-04-29

Assigner: VulDB

Description

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-16

Last Modified

2026-04-29

Generated

2026-07-06

AI Q&A

2025-11-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13252

EUVD

EUVD-2025-197734

Affected Vendors & Products

Vendor	Product	Version / Range
shsuishang	modulithshop	*
shsuishang	modulithshop	1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-259	The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the shsuishang ShopSuite ModulithShop product, specifically in an unknown functionality of the RSA/OAuth2/Database component. It involves hard-coded credentials that can be exploited remotely. The presence of hard-coded credentials means attackers can potentially gain unauthorized access without needing to bypass authentication mechanisms. The exploit has been made public, increasing the risk of attacks.

Impact Analysis

The vulnerability can allow remote attackers to exploit hard-coded credentials, potentially leading to unauthorized access to the system. This can result in data breaches, unauthorized actions, and compromise of system integrity and confidentiality.

Hi! I’m here to help you understand CVE-2025-13252. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70