7.5

CVE-2004-2669

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Neocrome ≫ Land Down Under Version701
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.61% 0.728
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/13034
Vendor Advisory
http://securitytracker.com/id?1012015
http://www.neocrome.net/index.php?m=single&id=91
http://www.neocrome.net/page.php?id=1573
http://www.osvdb.org/11299
http://www.osvdb.org/11300
http://www.osvdb.org/11301
http://www.osvdb.org/11302
http://www.ptsecurity.ru/advisory.asp
http://www.securityfocus.com/bid/11569
https://exchange.xforce.ibmcloud.com/vulnerabilities/17912