CVE-2005-2780

Cross-site scripting XSS vulnerability in Land Down Under LDU allows remote attackers to inject arbitrary web script or HTML via a signature...

CVE-2005-2788

Multiple SQL injection vulnerabilities in Land Down Under LDU 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to 1 events.php, 2 index.php, or 3 list.php...

CVE-2005-2780

Cross-site scripting XSS vulnerability in Land Down Under LDU allows remote attackers to inject arbitrary web script or HTML via a signature...

CVE-2005-2788

Land Down Under

CVE-2005-2780

The CVE-2005-2780 entry relates to Land Down Under (LDU). The OpenVAS entries describe multiple remote vulnerabilities in the LDU PHP code, including XSS and SQL injection, arising from insufficient sanitization in PHP scripts (notably in the signature handling) and related forum-post signature h...

CVE-2005-2788

Multiple SQL injection vulnerabilities in Land Down Under LDU 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to 1 events.php, 2 index.php, or 3 list.php...

lduSQL.txt

TITLE: ====== Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========= Land Down Under version 801 and prior Support Website : http://www.neocrome.net INFO: ===== Land Down Under is a multiple portal system which includes many different...

[Full-disclosure] Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities

TITLE: ====== Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========== Land Down Under version 801 and prior Support Website : http://www.neocrome.net INFO: ===== Land Down Under is a multiple portal system which includes many different...

Land Down Under 700/701/800/801 - 'events.php?c' SQL Injection

source: https://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromi...

CVE-2005-2675

Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under LDU 800 allow remote attackers to execute arbitrary SQL commands via the 1 s or 2 m parameter to forums.php, 3 o, 4 w, 5 s, or 6 p parameter to list.php, 7 m parameter to journal.php, 8 x or 9 n...

CVE-2005-2674

Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...

PT-2005-3560 · Land Down Under · Land Down Under (Ldu) 800

Name of the Vulnerable Software and Affected Versions: Land Down Under LDU 800 Description: Multiple cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the c or m parameters to "index.php" or the w parameter to "journal.php". The vendor has...

Land Down Under 800801 - forums.php Multiple SQL Injections

Land Down Under 800801 - forums.php Multiple SQL Injections source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...

Land Down Under 800/801 - 'journal.php?m' SQL Injection

source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the attacker to compromise the...

CVE-2005-2552

Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out ILO firmware before 1.81 allows attackers to access server controls when the server is "powered down."...

Ethereal 10.x - AFP Protocol Dissector Remote Format String

Ethereal 10.x - AFP Protocol Dissector Remote Format String / etherealv0.10.: AFP remote format string exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xethereal-afp-fmt.c -o xethereal-afp-fmt ethereal homepage/url: http://www.ethereal.com syntax: ./xethereal-afp-fmt -spSrPanc...

WPS Web-Portal-System v.0.7.0 (wps_shop.cgi) remote commands execution vulnerability

WPS Web-Portal-System v.0.7.0 wpsshop.cgi remote commands execution vulnerability Vendor URL : http://www.pcdoc24.de vendor website seem down Vulnerability : Remote Command Execution Risk : High ================================================================== An attacker may exploit this...

CVE-2004-2038

CVE-2004-2038 concerns a cross-site scripting (XSS) vulnerability in Land Down Under (LDU) prior to version 700. The issue allows remote attackers to inject arbitrary web script or HTML via a BBCode img tag in one of three PHP files: functions.php , header.php , or auth.inc.php . The provided doc...

CVE-2004-2038

Cross-site scripting XSS vulnerability in Land Down Under LDU before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in 1 functions.php, 2 header.php or 3 auth.inc.php...

[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...