Lucene search

MitreCVELIST:CVE-2012-5898

HistoryNov 17, 2012 - 9:00 p.m.

CVE-2012-5898

2012-11-1721:00:00

mitre

www.cve.org

csrf

samedia landshop 0.9.2

remote attackers

authentication

administrators

account settings

AI Score

7.1

Confidence

Low

EPSS

0.006

Percentile

77.9%

JSON

Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authentication of administrators for requests that change account settings.

References

osvdb.org/80800

packetstormsecurity.org/files/111415/Landshop-0.9.2-Cross-Site-Scripting-SQL-Injection.html

secunia.com/advisories/48661

vulnerability-lab.com/get_content.php?id=485

www.exploit-db.com/exploits/18687