CVE-2006-2096

Published: Apr 29, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message.

Affected (11)

Products: Neocrome: Land Down Under

Neocrome

1 product

Land Down Under

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Neocrome Land Down Under	Up to 802
Neocrome Land Down Under	Version 601
Neocrome Land Down Under	Version 602
Neocrome Land Down Under	Version 700.01
Neocrome Land Down Under	Version 700.02
Neocrome Land Down Under	Version 700.03
Neocrome Land Down Under	Version 700.04
Neocrome Land Down Under	Version 700.05
Neocrome Land Down Under	Version 701
Neocrome Land Down Under	Version 800
Neocrome Land Down Under	Version 801

References (6)

http://securityreason.com/securityalert/814

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/432235/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26143

Source: cve@mitre.org

http://securityreason.com/securityalert/814

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/432235/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26143

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.