CVE-2006-6835
Published Dec 31, 2006SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to j…
Vendor/product archive
neocrome / land_down_under CVEs
Beta · best-effort14 CVEs tagged to neocrome / land_down_under — 1 Critical, 6 High, 7 Medium, 0 Low, 0 Unrated.
CVE-2006-6577
Published Dec 15, 2006SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-6268
Published Dec 4, 2006SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL com…
CVE-2006-2096
Published Apr 29, 2006plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in…
CVE-2005-4711
Published Dec 31, 2005SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of th…
CVE-2005-4821
Published Dec 31, 2005Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parame…
CVE-2005-2884
Published Sep 14, 2005Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description…
CVE-2005-2780
Published Sep 2, 2005Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to inject arbitrary web script or HTML via a signature.
CVE-2005-2788
Published Sep 2, 2005Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2)…
CVE-2005-2674
Published Aug 23, 2005Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or…
CVE-2005-2675
Published Aug 23, 2005Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via the (1)…
CVE-2004-2669
Published Dec 31, 2004Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters includ…
CVE-2004-2038
Published May 29, 2004Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in (1) functio…
CVE-2003-1315
Published Dec 31, 2003SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands.
Showing 1-14 of 14 CVEsPage 1 of 1