Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

neocrome land down under vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-2096
plug.php in Land Down Under (LDU) 802 and previous versions allows remote malicious users to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message.
Neocrome Land Down Under 601Neocrome Land Down Under 602Neocrome Land Down Under 801Neocrome Land Down UnderNeocrome Land Down Under 700.04Neocrome Land Down Under 700.05Neocrome Land Down Under 701Neocrome Land Down Under 800Neocrome Land Down Under 700.01Neocrome Land Down Under 700.02Neocrome Land Down Under 700.03
NA
CVE-2005-2884
Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the Description field in an event.
Neocrome Land Down Under 601Neocrome Land Down Under 800Neocrome Land Down Under 801Neocrome Land Down Under 700.02Neocrome Land Down Under 700.03Neocrome Land Down Under 700.04Neocrome Land Down Under 602Neocrome Land Down Under 700.01Neocrome Land Down Under 700.05Neocrome Land Down Under 701
NA
CVE-2005-2788
Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and previous versions allow remote malicious users to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.
Neocrome Land Down Under 701Neocrome Land Down Under 800Neocrome Land Down Under 700.01Neocrome Land Down Under 801Neocrome Land Down Under 700.02Neocrome Land Down Under 700.03Neocrome Land Down Under 700.04Neocrome Land Down Under 700.05
NA
CVE-2004-2038
Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote malicious users to inject arbitrary web script or HTML via a BBcode img tag in (1) functions.php, (2) header.php or (3) auth.inc.php.
Neocrome Land Down Under 700.01Neocrome Land Down Under 700.02Neocrome Land Down Under 601Neocrome Land Down Under 602Neocrome Land Down Under
NA
CVE-2006-6835
SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and previous versions allows remote malicious users to execute arbitrary SQL commands via the w parameter to journal.php.
Neocrome Land Down Under 800Neocrome Land Down Under 801Neocrome Land Down Under 802
NA
CVE-2005-4821
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and previous versions allow remote malicious users to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.ph...
Neocrome Land Down Under 801Neocrome Land Down Under 800
NA
CVE-2006-6268
SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and previous versions allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as dem...
Neocrome Land Down Under
NA
CVE-2005-2780
Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote malicious users to inject arbitrary web script or HTML via a signature.
Neocrome Land Down Under 800
NA
CVE-2004-2669
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote malicious users to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h i...
Neocrome Land Down Under 701
NA
CVE-2005-2674
Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote malicious users to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php. NOTE: t...
Neocrome Land Down Under 800
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook