VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 17, 2012· Updated Jun 16, 2026

CVE-2012-5899

CVE-2012-5899

Description

Cross-site scripting (XSS) vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the OTR_HEADS[] parameter in an edit action. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Samedia/Landshop2 versions
    cpe:2.3:a:samedia:landshop:0.9.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:samedia:landshop:0.9.2:*:*:*:*:*:*:*
    • (no CPE)range: 0.9.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.