GCVE - cpe:2.3:a:neocrome:land_down_under:701:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:neocrome:land_down_under:701:*:*:*:*:*:*:*

part: a version: 701 update: *

Vendor	Neocrome (`979294e6-b9c2-54f8-826d-813d70d0ea12`)
Product	Land Down Under (`f203a023-9b99-5d4a-a4e1-22f361cb367b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2096`	vulnerable	2026-06-08 04:48:58.874483	Details available plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message. Published: 2006-04-29T10:00:00.000Z Updated: 2024-08-07T17:35:31.324Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/432235/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/26143 http://securityreason.com/securityalert/814	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2884`	vulnerable	2026-06-08 04:48:30.824096	Details available Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event. Published: 2005-09-14T04:00:00.000Z Updated: 2024-08-07T22:53:29.597Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=112604873103252&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22195 http://www.securityfocus.com/bid/14746 http://secunia.com/advisories/16710/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2788`	vulnerable	2026-06-08 04:48:30.548265	Details available Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php. Published: 2005-09-02T04:00:00.000Z Updated: 2024-08-07T22:45:02.243Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14685 http://marc.info/?l=bugtraq&m=112534574505945&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22047	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2669`	vulnerable	2026-06-08 04:48:10.561248	Details available Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php. Published: 2006-12-29T11:00:00.000Z Updated: 2024-08-08T01:36:25.153Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/17912 http://www.neocrome.net/index.php?m=single&id=91 http://www.osvdb.org/11300 http://www.securityfocus.com/bid/11569 http://secunia.com/advisories/13034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1315`	vulnerable	2026-06-08 04:47:47.308215	Details available SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands. Published: 2006-12-29T11:00:00.000Z Updated: 2024-08-08T02:19:46.182Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1008416 http://www.neocrome.net/index.php?m=single&id=76 http://www.neocrome.net/page.php?id=1250 http://www.osvdb.org/2943 http://www.securityfocus.com/bid/9168	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.