Landshop

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5900 HIGH POC This Week

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) OB_ID parameter in a single action to admin/action/objects.php,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Landshop

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

2.5%

CVE-2012-5899 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the OTR_HEADS[] parameter in an edit. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Landshop

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

6.6%

CVE-2012-5898 MEDIUM POC This Month

Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authentication of administrators for requests that change account settings. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

CSRF Landshop

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.5%

CVE-2012-5900

EPSS 2% CVSS 7.5

HIGH POC This Week

PHP SQLi Landshop

NVD Exploit-DB

CVE-2012-5899

EPSS 7% CVSS 4.3

MEDIUM POC This Month

PHP XSS Landshop

NVD Exploit-DB

CVE-2012-5898

EPSS 0% CVSS 6.8

MEDIUM POC This Month

CSRF Landshop

NVD Exploit-DB