high7.5Public exploit code
CVE-2005-4821
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters includ…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Land Down Under 800/801 - 'plug.php?e' SQL Injection2005-09-13 · webapps · php · Verified
- Land Down Under 800/801 - 'auth.php?m' SQL Injection2005-09-13 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Neocrome | Land Down Under | Versions 800, 801 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html
- http://www.g-0.org/code/ldu-adv.html
- http://www.osvdb.org/19504
- http://www.osvdb.org/19505
- http://www.securityfocus.com/bid/14820
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html
- http://www.g-0.org/code/ldu-adv.html
- http://www.osvdb.org/19504
- http://www.osvdb.org/19505
- http://www.securityfocus.com/bid/14820