NetSight
IP …
high7.5Public exploit code

CVE-2005-2788

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.

Affected products

VendorProductAffected versions
NeocromeLand Down Under
Versions 700.01, 700.02, 700.03, 700.04, 700.05, 701

References