CVE-2006-6835

Technical details for CVE-2006-6835 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-6835

SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php...

CVE-2005-4821

Multiple SQL injection vulnerabilities in Land Down Under LDU v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including 1 the m parameter in auth.php, 2 the f parameter in events.php, or 3 the e parameter in plug.php...

CVE-2005-4821

CVE-2005-4821 affects Land Down Under (LDU) 8.01 and earlier. The vulnerability is SQL injection in web parameters: m in auth.php, f in events.php, and e in plug.php, allowing remote attackers to alter or disclose data. The CVSS v2 base score is 7.5 (HIGH) with network access, no authentication, ...

CVE-2006-6577

SQL injection vulnerability in polls.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6577

CVE-2006-6577 affects Neocrome Land Down Under (LDU) 8.x and earlier, where polls.php is vulnerable to SQL injection via the id parameter. The remote attacker can cause arbitrary SQL execution, with partial impact on confidentiality, integrity, and availability (CVSS 2.0 base score 6.8). Connecte...

Seditio/Land Down Under Polls.PHP SQL注入漏洞

Seditio/Land Down Under是一款基于php的WEB应用程序。 Seditio/Land Down Under不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Polls.PHP'脚本对用户提交的'id'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过web root路径限制，以web权限查看系统文件内容。 Neocrome Seditio 1.10 Neocrome Land Down Under 8.0 目前没有解决方案提供： http://www.neocrome.net/...

CVE-2006-6268

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...

CVE-2006-6268

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...

CVE-2006-6268

CVE-2006-6268 is a SQL injection vulnerability affecting Neocrome Land Down Under (LDU) 8.x and earlier. The flaw resides in system/core/profile/profile.inc.php, where a url-encoded id parameter to users.php that begins with a valid filename can be exploited by remote authenticated users to injec...

CVE-2006-6268

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...

Seditio1.10 Land Down 8.0 Under - polls.php SQL Injection

Seditio1.10 Land Down 8.0 Under - polls.php SQL Injection source: https://www.securityfocus.com/bid/21366/info Seditio and Land Down Under are prone to an SQL-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A successf...

Seditio1.10 / Land Down 8.0 Under - 'polls.php' SQL Injection

source: https://www.securityfocus.com/bid/21366/info Seditio and Land Down Under are prone to an SQL-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Neocrome Land Down Under Profile.Inc.PHP SQL 注入漏洞

Neocrome Land Down Under是一款基于PHP的WEB应用程序。 Neocrome Land Down Under不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Profile.Inc.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 Neocrome Land Down Under 8.0 目前没有解决方案提供： http://www.neocrome.ne/...

Microsoft IPv6 TCP/IP Loopback LAND攻击拒绝服务(MS05-019/MS06-064)

Microsoft Windows是微软发布的非常流行的操作系统。 关闭了Windows防火墙的Windows Server 2003和XP SP2受LAND攻击的影响。攻击者可以发送设置了SYN标记的TCP报文，将源IP地址和目标IP地址及源端口和目标端口都设置为目标机器，导致15-30秒的DoS情况。 向文件服务器发送单个LAND报文就可能导致当前连接到服务器上所有工作站的Windows explorer僵死，服务器的CPU使用率达到100%。有时有漏洞服务器上的网络监控甚至无法嗅探的出恶意的报文。使用tcpreplay重现攻击可以导致网络完全瘫痪。 Microsoft Window...

CVE-2006-4833

Verso NetPerformer FRAD ACT SDM-95xx 7.xx R1 and earlier, SDM-93xx 10.x.x R2 and earlier, and SDM-92xx 9.x.x R1 and earlier allow remote attackers to cause a denial of service hang or reboot via an ICMP packet with the same destination and source address and port, aka the "Land" vulnerability...

CVE-2006-4833

The CVE-2006-4833 entry concerns Verso NetPerformer FRAD ACT SDM-95xx (R1 and earlier, 7.xx), SDM-93xx (R2 and earlier, 10.x.x), and SDM-92xx (R1 and earlier, 9.x.x). It describes a remote denial of service caused by sending an ICMP packet with the same destination and source address and port (th...

netperformer.txt

NetPerformer Frame Relay Access Device FRAD ACT Multiple Vulnerabilities .. Release Date : 8 July 2006 Product Affected : - NetPerformer FRAD ACT SDM-95xx version 7.xx R1, earlier, and possibly newer - NetPerformer FRAD ACT SDM-93xx version 10.x.x R2, earlier, and possibly newer - NetPerformer FR...

Multiple NetPerformer FRAD ACT security vulnerabilities

Buffer overflow on oversized telnet username, LAND attack vulnerability...

[Full-disclosure] NetPerformer FRAD ACT Multiple Vulnerabilities

NetPerformer Frame Relay Access Device FRAD ACT Multiple Vulnerabilities .= Arif Jatmoko =. Release Date : 8 July 2006 Product Affected : - NetPerformer FRAD ACT SDM-95xx version 7.xx R1, earlier, and possibly newer - NetPerformer FRAD ACT SDM-93xx version 10.x.x R2, earlier, and possibly newer -...