CVE-2004-2669

Multiple SQL injection vulnerabilities in Land Down Under LDU v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including 1 s, w, and d in users.php, 2 id in comments.php, 3 rusername in auth.php, or 4 h in plug.php...

CVE-2004-2669

CVE-2004-2669 affects Land Down Under (LDU) v701 and enables multiple SQL injection vectors via PHP parameters: s, w, d in users.php; id in comments.php; rusername in auth.php; h in plug.php. Root cause is unsafely-constructed SQL queries with user input, allowing remote execution of arbitrary SQ...