Vulnerabilities

TI-2012-04925 CVE-2012-5900 · GHSA-5q2p-hmg7-q6ph

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) OB_ID parameter in a single action to admin/action/objects.php, (2) AREA_ID parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01278 Published 2012-11-17 No fix listed CWE-89

TI-2012-04924 CVE-2012-5899 · GHSA-r54r-gv67-9672

Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop…

LOW 23

Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the OTR_HEADS[] parameter in an edit action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01633 Published 2012-11-17 No fix listed CWE-79

TI-2012-04923 CVE-2012-5898 · GHSA-mxm9-67rp-4x9v

Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote…

LOW 32

Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authentication of administrators for requests that change account settings.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01076 Published 2012-11-17 No fix listed CWE-352

TI-2006-05698 CVE-2006-5915 · GHSA-grmf-3jx9-vmvh

Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbitrary web script or HTML via the (1) start, (2) CAT_ID, (3) keyword, (4) search_area, (5) search_type…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0211 Published 2006-11-15 No fix listed

TI-2006-05697 CVE-2006-5914 · GHSA-4qj3-c3cm-qv32

SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to…