42 matches found
LDU <= 8.x (avatarselect id) Remote SQL Injection Vulnerability
No description provided by source. LDU = 8.x Remote SQL Injection avatarselect id Vulnerability Discovered by: nukedx Contacts: ICQ: 10072 MSN/Mail: [email protected] web: http://www.nukedx.com Original advisory can be found at: http://www.nukedx.com/?viewdoc=51 ---- GET -...
Advisory: LDU <= 8.x Remote SQL Injection Vulnerability.
--Security Report-- Advisory: LDU = 8.x Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 21/10/06 09:44 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Neocrome http://www.neocrome.net Version:...
LDU 8.x - avatarselect id SQL Injection
LDU 8.x - avatarselect id SQL Injection LDU http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL Inject GET -...
LDU <= 8.x (avatarselect id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== LDU http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL Inject GET -...
LDU 8.x - avatarselect id SQL Injection
LDU http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL Inject GET - http://www.victim.com/users.php?m=profile&a=avatarselect&x=011A99&id=default.gif%2500%2527,userpassword=%2527e10adc3949ba59abbe56e057f20f883e%2527//where//userid=1/ with this example remote attack...
LDU Portal All Version SQL Injection
LDU Portal All Version SQL Injection Credit : SpC-x | The-BeKiR Site : http://wWw.SaVSaK.CoM Greetz : | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Code : http://www.target.com/path/message.php?msg='SQL' http://www.target.com/path/index.php?m='SQL' http://www.target.com/path/page.php?id='SQL'...
CVE-2006-2634
The vulnerability CVE-2006-2634 is an XSS flaw in Neocrome Land Down Under (LDU) within Neocrome Seditio 102, exploitable via an HTTP Referer header to inject arbitrary script/HTML. The impact stated is that remote attackers can execute script in a victim’s browser. The connected documents confir...
CVE-2006-2096
plug.php in Land Down Under LDU 802 and earlier allows remote attackers to obtain sensitive information via an invalid 1 month or 2 year parameter, which reveals the path in an error message...
CVE-2006-2096
The CVE-2006-2096 entry affects Land Down Under (LDU) 802 and earlier. The vulnerability is in plug.php where an invalid month or year parameter can cause an error message to disclose the system path, enabling information disclosure. The provided sources describe this as a remote information-leak...
Land Down Under (LDU) Detection (HTTP)
HTTP based detection of Land Down Under LDU. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2005-4711
Neocrome Land Down Under (LDU) 801 is affected by CVE-2005-4711: SQL injection via input from the HTTP Referer header. The issue allows remote attackers to execute arbitrary SQL commands on the backend database. The Nessus NASL item for LDU_REFERER_SQL_INJECTION.NASL documents that input from the...
CVE-2005-2884
The connected sources show concrete details for CVE-2005-2884 related to Land Down Under (LDU) <= 801. The vulnerability includes Cross-Site Scripting (XSS) in events.php and, per OpenVAS, multiple issues (including SQL injection) due to inadequate input sanitization in PHP scripts (events.php...
CVE-2005-2884
Cross-site scripting XSS vulnerability in events.php in Land Down Under LDU 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event...
LDU Software/Version Detection
This script detects whether the remote host is running Land Down Under LDU and extracts the version number and location if found. Land Down Under is a highly customizable and fully scalable content management system using PHP and MySQL. Script by Josh Zlatin-Amishav josh at ramat dot cc GPLv2...
CVE-2005-2780
The CVE-2005-2780 entry relates to Land Down Under (LDU). The OpenVAS entries describe multiple remote vulnerabilities in the LDU PHP code, including XSS and SQL injection, arising from insufficient sanitization in PHP scripts (notably in the signature handling) and related forum-post signature h...
CVE-2005-2788
Land Down Under
CVE-2005-2675
CVE-2005-2675 corresponds to multiple SQL injection vulnerabilities in Land Down Under (LDU) 800/800-series in which remote attackers could manipulate SQL queries via various PHP script parameters (forums.php, list.php, journal.php, forums.php, links.php). OpenVAS/Nessus entries corroborate SQLi ...
CVE-2005-2674
Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...
CVE-2005-2674
Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...