Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html | |
http://www.g-0.org/code/ldu-adv.html | Exploit Vendor Advisory URL Repurposed |
http://www.osvdb.org/19504 | Exploit |
http://www.osvdb.org/19505 | Exploit |
http://www.securityfocus.com/bid/14820 | Exploit |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:22:44
Updated: 2022-10-03T16:22:44
Reserved: 2022-10-03T00:00:00
Link: CVE-2005-4821
JSON object: View
NVD Information
Status : Analyzed
Published: 2005-12-31T05:00:00.000
Modified: 2024-02-14T01:17:43.863
Link: CVE-2005-4821
JSON object: View
Redhat Information
No data.
CWE