Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2003-1315 1 Neocrome 1 Land Down Under 2025-04-03 N/A
SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands.
CVE-2004-2669 1 Neocrome 1 Land Down Under 2025-04-03 N/A
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php.
CVE-2006-2634 1 Neocrome 1 Seditio 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field.
CVE-2005-2884 1 Neocrome 1 Land Down Under 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event.