Description
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php.
References
- land-down-under-sql-injection(17912) vdb-entry
- http://www.neocrome.net/index.php?m=single&id=91
- 11300 vdb-entry
- 11569 vdb-entry
- 13034 third-party-advisory
- 11299 vdb-entry
- 11301 vdb-entry
- 1012015 vdb-entry
- http://www.neocrome.net/page.php?id=1573
- http://www.ptsecurity.ru/advisory.asp
- 11302 vdb-entry