Landshop@0.9.2 Security Vulnerabilities and Issues — Landshop@0.9.2 CVE List

Lucene search

SamediaLandshop0.9.2

3 matches found

CVE•added 2012/11/17 9:55 p.m.•47 views

CVE-2012-5900

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) OB_ID parameter in a single action to admin/action/objects.php, (2) AREA_ID parameter in a single action to admin/action/areas.php, or (3) start parameter in a show ...

7.5CVSS8.7AI score0.01485EPSS

CVE•added 2012/11/17 9:55 p.m.•41 views

CVE-2012-5898

Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authentication of administrators for requests that change account settings.

6.8CVSS7.3AI score0.00328EPSS

CVE•added 2012/11/17 9:55 p.m.•30 views

CVE-2012-5899

Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the OTR_HEADS[] parameter in an edit action. NOTE: some of these details are obtained from third party information.

4.3CVSS5.9AI score0.03547EPSS