CVE-2004-2669

CVE-2004-2669 affects Land Down Under (LDU) v701 and enables multiple SQL injection vectors via PHP parameters: s, w, d in users.php; id in comments.php; rusername in auth.php; h in plug.php. Root cause is unsafely-constructed SQL queries with user input, allowing remote execution of arbitrary SQ...