CVE

Id
59143  
CVE No.
CVE-2012-5900  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) OB_ID parameter in a single action to admin/action/objects.php, (2) AREA_ID parameter in a single action to admin/action/areas.php, or (3) start parameter in a show action to admin/action/pdf.php.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603784 59143 CVE-2012-5900 EXPLOIT-DB:18687  View
603785 59143 CVE-2012-5900 URL:http://www.exploit-db.com/exploits/18687  View
603786 59143 CVE-2012-5900 MISC:http://packetstormsecurity.org/files/111415/Landshop-0.9.2-Cross-Site-Scripting-SQL-Injection.html  View
603787 59143 CVE-2012-5900 MISC:http://vulnerability-lab.com/get_content.php?id=485  View
603788 59143 CVE-2012-5900 OSVDB:80796  View
603789 59143 CVE-2012-5900 URL:http://osvdb.org/80796  View
603790 59143 CVE-2012-5900 OSVDB:80797  View
603791 59143 CVE-2012-5900 URL:http://osvdb.org/80797  View
603792 59143 CVE-2012-5900 OSVDB:80798  View
603793 59143 CVE-2012-5900 URL:http://osvdb.org/80798  View
603794 59143 CVE-2012-5900 SECUNIA:48661  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29693 JVNDB-2012-005400 KnFTPd におけるバッファオーバーフローの脆弱性 KnFTPd には、バッファオーバーフローの脆弱性が存在します。 CVE-2012-5905 59143 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005400.html  View