Lucene search

K
cvelistMitreCVELIST:CVE-2012-5900
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5900

2022-10-0316:15:31
mitre
www.cve.org
samedia landshop
sql injection
remote attackers
arbitrary sql commands
ob_id parameter
area_id parameter
start parameter

8.5 High

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.6%

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) OB_ID parameter in a single action to admin/action/objects.php, (2) AREA_ID parameter in a single action to admin/action/areas.php, or (3) start parameter in a show action to admin/action/pdf.php.

8.5 High

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.6%

Related for CVELIST:CVE-2012-5900