EUVD-2006-5897

Malware in sbrugna...

CVE-2009-3542

Directory traversal vulnerability in ls.php in LittleSite aka LS or LittleSite.php 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a U...

CVE-2006-5915

Multiple cross-site scripting XSS vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbitrary web script or HTML via the 1 start, 2 CATID, 3 keyword, 4 searcharea, 5 searchtype, 6 infield, or 7 searchorder parameter...

CVE-2006-5915

Multiple cross-site scripting XSS vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbitrary web script or HTML via the 1 start, 2 CATID, 3 keyword, 4 searcharea, 5 searchtype, 6 infield, or 7 searchorder parameter...

CVE-2006-5915

The CVE-2006-5915 entry describes multiple cross-site scripting (XSS) vulnerabilities in the SAMEDIA LandShop component ls.php. The issue allows remote attackers to inject arbitrary web script or HTML by providing inputs in one or more of the following parameters: start, CAT_ID, keyword, search_a...

CVE-2006-5914

SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via the infield parameter. NOTE: the start, searchorder, searchtype, and searcharea parameters are already covered by CVE-2005-4018...

CVE-2006-5914

The CVE-2006-5914 entry describes an SQL injection in ls.php of SAMEDIA LandShop (Landshop Real Estate Commerce System) that lets remote attackers execute arbitrary SQL via the infield parameter. The note indicates that related parameters (start, search_order, search_type, search_area) are alread...

CVE-2005-4018

SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 start, 2 searchorder, 3 searchtype, 4 searcharea, and 5 keyword parameters...

CVE-2005-4018

SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 start, 2 searchorder, 3 searchtype, 4 searcharea, and 5 keyword parameters...

CVE-2005-4018

The connected records confirm a SQL injection vulnerability in LandShop Real Estate Commerce System 0.6.3 and earlier via ls.php, exploitable through parameters (start, search_order, search_type, search_area, keyword). The root cause is likely unsanitized user input incorporated into SQL queries,...