LandShop CMS v0.9.2 Multiple Web Vulnerabilities (SQLi/XSS/CSRF) Advisory

Vulnerability Key Information Vulnerability Overview Document Title: LandShop CMS v0.9.2 - Multiple Web Vulnerabilities Reference Source: http://vulnerability-lab.com/get_content.php?id=485 Release Date: 2012-03-31 Vulnerability Lab ID (VL-ID): 485 Product and Service Description SAMEDIA LandShop® is an innovative tool designed for real estate marketing, sales, or rentals via the internet. LandShop® features a flexible, transparent, and fast user interface that immediately displays the core business and helps visitors easily find projects of interest. Vulnerability Summary A vulnerability lab researcher discovered multiple web vulnerabilities in LandShop CMS v0.9.2. Disclosure Timeline 2012-03-31: Public or non-public disclosure Vulnerability Status Published Exploitation Technique Remote Severity Level Critical Technical Details and Description 1.1 Remote SQL Injection Vulnerability The vulnerability affects the LandShops web application version v0.9.2. Attackers can inject and execute SQL commands. Affected modules: , , . 2.1 Persistent Input Validation Vulnerability Attackers can inject malicious scripts on the application side. Successful exploitation may lead to session hijacking or persistent context manipulation. Affected module: Create Object - Input/Output Name. 2.2 Cross-Site Request Forgery (CSRF) Vulnerability Requires high-level user interaction to exploit. Successful exploitation may result in account access. Affected module: Edit Users Form. Proof of Concept (PoC) The SQL injection vulnerability can be exploited remotely by attackers without requiring user interaction. The persistent web vulnerability requires medium to high levels of user interaction. Security Risk 1.1: SQL Injection vulnerability assessed as critical risk. 2.1: Persistent input validation vulnerability assessed as medium risk. 2.2: CSRF vulnerability assessed as low risk. Related Personnel Vulnerability Researcher: the_storm (the_storm@vulnerability-lab.com)

Goal Reached Thanks to every supporter — we hit 100%!

LandShop CMS v0.9.2 Multiple Web Vulnerabilities (SQLi/XSS/CSRF) Advisory

More from this source