Description
SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php.
References
- 2085 third-party-advisory
- 20061229 LDU <= 8.x (journal.php) SQL Injection Vulnerability mailing-list
- ldu-journal-sql-injection(31189) vdb-entry