GCVE - cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:neocrome:land_down_under:801:*:*:*:*:*:*:*

part: a version: 801 update: *

Vendor	Neocrome (`979294e6-b9c2-54f8-826d-813d70d0ea12`)
Product	Land Down Under (`f203a023-9b99-5d4a-a4e1-22f361cb367b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6835`	vulnerable	2026-06-08 04:49:29.828578	Details available SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php. Published: 2007-01-01T23:00:00.000Z Updated: 2024-08-07T20:42:07.537Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/2085 http://www.securityfocus.com/archive/1/455495/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/31189	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2096`	vulnerable	2026-06-08 04:48:58.875583	Details available plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message. Published: 2006-04-29T10:00:00.000Z Updated: 2024-08-07T17:35:31.324Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/432235/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/26143 http://securityreason.com/securityalert/814	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4821`	vulnerable	2026-06-08 04:48:45.256913	Details available Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php. Published: 2006-12-29T11:00:00.000Z Updated: 2024-09-17T02:26:35.086Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html http://www.osvdb.org/19505 http://www.securityfocus.com/bid/14820 http://www.osvdb.org/19504 http://www.g-0.org/code/ldu-adv.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4711`	not_vulnerable	2026-06-08 04:48:44.840557	Details available SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2006-02-10T11:00:00.000Z Updated: 2024-08-07T23:53:28.971Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/22352 http://secunia.com/advisories/16878 http://www.osvdb.org/19585	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2884`	vulnerable	2026-06-08 04:48:30.824136	Details available Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event. Published: 2005-09-14T04:00:00.000Z Updated: 2024-08-07T22:53:29.597Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=112604873103252&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22195 http://www.securityfocus.com/bid/14746 http://secunia.com/advisories/16710/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2788`	vulnerable	2026-06-08 04:48:30.549057	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.