CVE-2005-2788

Published: Sep 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.

Affected (8)

Products: Neocrome: Land Down Under

Neocrome

1 product

Land Down Under

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Neocrome Land Down Under	Version 700.01
Neocrome Land Down Under	Version 700.02
Neocrome Land Down Under	Version 700.03
Neocrome Land Down Under	Version 700.04
Neocrome Land Down Under	Version 700.05
Neocrome Land Down Under	Version 701
Neocrome Land Down Under	Version 800
Neocrome Land Down Under	Version 801

References (6)

http://marc.info/?l=bugtraq&m=112534574505945&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/14685

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/22047

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112534574505945&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14685

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/22047

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.