Microsoft Windows win32k.sys DoS

WMCLOSE event for active drop-down menu causes system to crash...

CVE-2005-2884

Cross-site scripting XSS vulnerability in events.php in Land Down Under LDU 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event...

CVE-2005-2884: Undefined Security Weakness

Cross-site scripting XSS vulnerability in events.php in Land Down Under LDU 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event...

Land Down Under 800801 - plug.php?e SQL Injection

Land Down Under 800801 - plug.php?e SQL Injection source: https://www.securityfocus.com/bid/14820/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

Land Down Under <= 801 Multiple Vulnerabilities

The remote version of Land Down Under is prone to several SQL injection and cross-site scripting attacks due to its failure to sanitize user-supplied input to several parameters used by the 'auth.php', 'events.php', 'index.php', 'list.php', and 'plug.php' scripts. A malicious user can exploit...

Land Down Under 601/602/700/701/800/801 - 'events.php' HTML Injection

source: https://www.securityfocus.com/bid/14746/info Land Down Under is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code wou...

Land Down Under <= 800 Multiple Vulnerabilities

The remote version of Land Down Under is prone to various SQL injection and cross-site scripting attacks provided PHP's 'magicquotes' setting is disabled due to its failure to sanitize the request URI before using it in 'system/functions.php' in the function 'ldulog'. A malicious user may be able...

CVE-2005-2780

Cross-site scripting XSS vulnerability in Land Down Under LDU allows remote attackers to inject arbitrary web script or HTML via a signature...

CVE-2005-2788

Multiple SQL injection vulnerabilities in Land Down Under LDU 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to 1 events.php, 2 index.php, or 3 list.php...

CVE-2005-2780

Cross-site scripting XSS vulnerability in Land Down Under LDU allows remote attackers to inject arbitrary web script or HTML via a signature...

CVE-2005-2780

The CVE-2005-2780 entry relates to Land Down Under (LDU). The OpenVAS entries describe multiple remote vulnerabilities in the LDU PHP code, including XSS and SQL injection, arising from insufficient sanitization in PHP scripts (notably in the signature handling) and related forum-post signature h...

CVE-2005-2788

Land Down Under

CVE-2005-2788

Multiple SQL injection vulnerabilities in Land Down Under LDU 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to 1 events.php, 2 index.php, or 3 list.php...

CVE-2005-2780: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Land Down Under LDU allows remote attackers to inject arbitrary web script or HTML via a signature...

CVE-2005-2788: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Land Down Under LDU 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to 1 events.php, 2 index.php, or 3 list.php...

lduSQL.txt

TITLE: ====== Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========= Land Down Under version 801 and prior Support Website : http://www.neocrome.net INFO: ===== Land Down Under is a multiple portal system which includes many different...

Land Down Under 700/701/800/801 - 'events.php?c' SQL Injection

source: https://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromi...

[Full-disclosure] Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities

TITLE: ====== Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========== Land Down Under version 801 and prior Support Website : http://www.neocrome.net INFO: ===== Land Down Under is a multiple portal system which includes many different...

CVE-2005-2675

Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under LDU 800 allow remote attackers to execute arbitrary SQL commands via the 1 s or 2 m parameter to forums.php, 3 o, 4 w, 5 s, or 6 p parameter to list.php, 7 m parameter to journal.php, 8 x or 9 n...

CVE-2005-2674

Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...