Vulnerabilities

TI-2011-04578 CVE-2011-5306 · GHSA-67h3-48c6-8fgj

Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in…

LOW 31

Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijack the authentication of administrators for requests that modify settings via a se…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00609 Published 2015-01-01 No fix listed CWE-352

TI-2011-04577 CVE-2011-5305 · GHSA-h89c-ww4h-vjxj

Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote attackers to inject arbitrary web script or HTML via (1) the rcopy parameter to cgi-bin/admin/rubrikadmin.cgi, (2) the typ param…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00966 Published 2015-01-01 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in…

Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow…