Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Zaunz Gmbh Subscribe
Filtered by product Cosmoshop
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-5306 1 Zaunz Gmbh 1 Cosmoshop 2015-01-02 6.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijack the authentication of administrators for requests that modify settings via a setup action.
CVE-2011-5305 1 Zaunz Gmbh 1 Cosmoshop 2015-01-02 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote attackers to inject arbitrary web script or HTML via (1) the rcopy parameter to cgi-bin/admin/rubrikadmin.cgi, (2) the typ parameter to cgi-bin/admin/artikeladmin.cgi, or (3) the suchbegriff parameter to cgi-bin/admin/shophilfe_suche.cgi.