CVE-2005-4018: Landshop Real Estate Commerce System

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) search_type, (4) search_area, and (5) keyword parameters.

Affected products

• Landshop Real Estate Commerce System: up to and including 0.6.3

Published 2005-12-05. Last modified 2026-06-16.