CVE-2004-2669

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php.

Affected products

Neocrome Land Down Under: 701

References

http://secunia.com/advisories/13034
http://securitytracker.com/id?1012015
http://www.neocrome.net/index.php?m=single&id=91
http://www.neocrome.net/page.php?id=1573
http://www.osvdb.org/11299
http://www.osvdb.org/11300
http://www.osvdb.org/11301
http://www.osvdb.org/11302
http://www.ptsecurity.ru/advisory.asp
http://www.securityfocus.com/bid/11569
https://exchange.xforce.ibmcloud.com/vulnerabilities/17912
http://secunia.com/advisories/13034

Get alerted when CVE-2004-2669 or the next vulnerability affects your stack