CVE

Id
13881  
CVE No.
CVE-2005-2675  
Status
Candidate  
Description
** DISPUTED ** Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via the (1) s or (2) m parameter to forums.php, (3) o, (4) w, (5) s, or (6) p parameter to list.php, (7) m parameter to journal.php, (8) x or (9) n parameter to forums.php, or (10) w parameter to links.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected."  
Phase
Assigned (20050823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
101598 13881 CVE-2005-2675 BUGTRAQ:20050820 Bugs Land Down Under v800  View
101599 13881 CVE-2005-2675 URL:http://marc.info/?l=bugtraq&m=112456235729717&w=2  View
101600 13881 CVE-2005-2675 MISC:http://www.neocrome.net  View
101601 13881 CVE-2005-2675 BID:14618  View
101602 13881 CVE-2005-2675 URL:http://www.securityfocus.com/bid/14618  View
101603 13881 CVE-2005-2675 SECTRACK:1014747  View

Related JVN