Neocrome

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Neocrome records in CISA KEV

No Neocrome vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Land Down Under 13 records MEDIUM Seditio 11 records LOW

Records

13 records in Land Down Under · all components

TI-2006-06032 CVE-2006-6268 · GHSA-v9rg-v3xf-623p

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down…

MEDIUM 47

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02046 Published 2006-12-04 No fix listed

TI-2005-04551 CVE-2005-4821 · GHSA-pqmh-m9r6-3v94

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow…

LOW 37

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in e…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0234 Published 2006-12-29 No fix listed

TI-2005-02649 CVE-2005-2788 · GHSA-w4wp-3ph5-rj4v

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow…

LOW 37

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02411 Published 2005-09-02 No fix listed

TI-2004-02539 CVE-2004-2669 · GHSA-fp4j-7xhw-chrp

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote…

LOW 36

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0171 Published 2006-12-29 No fix listed

TI-2003-01215 CVE-2003-1315 · GHSA-7g5g-x3hv-jj7j

SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows…

LOW 36

SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01351 Published 2006-12-29 No fix listed

TI-2006-06578 CVE-2006-6835 · GHSA-7mvv-jr9h-pccg

SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and…

LOW 35

SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01148 Published 2007-01-01 No fix listed

TI-2005-02538 CVE-2005-2675 · GHSA-wh2v-hxm2-h4c7

Note: the vendor has disputed this issue.

LOW 35

Note: the vendor has disputed this issue.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01172 Published 2005-08-23 No fix listed

TI-2006-06321 CVE-2006-6577 · GHSA-jc2c-vq5c-jvf3

SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and…

LOW 32

SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01028 Published 2006-12-15 No fix listed

TI-2006-02041 CVE-2006-2096 · GHSA-r54v-mqmv-42qm

plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain…

LOW 26

plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01409 Published 2006-04-29 No fix listed

TI-2004-01911 CVE-2004-2038 · GHSA-9cwv-xrw2-6fjh

Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows…

LOW 25

Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in (1) functions.php, (2) header.php or (3) auth.inc.ph…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02539 Published 2005-05-10 No fix listed

TI-2005-02537 CVE-2005-2674 · GHSA-c75r-vjp7-wfm5

Note: the vendor has disputed this issue.

LOW 24

Note: the vendor has disputed this issue.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01768 Published 2005-08-23 No fix listed

TI-2005-02731 CVE-2005-2884 · GHSA-7qhh-33jg-v65h

Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and…

LOW 23

Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01255 Published 2005-09-14 No fix listed

TI-2005-02641 CVE-2005-2780 · GHSA-9cr7-cxwv-9982

Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers…

LOW 22

Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to inject arbitrary web script or HTML via a signature.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00938 Published 2005-09-02 No fix listed

Open these records in search →

Critical	1
High	9
Medium	12
Low	1
No CVSS	0