CVE-2005-4821

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html
http://www.g-0.org/code/ldu-adv.htmlExploit, Vendor Advisory, URL Repurposed
http://www.osvdb.org/19504Exploit
http://www.osvdb.org/19505Exploit
http://www.securityfocus.com/bid/14820Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0381.html
http://www.g-0.org/code/ldu-adv.htmlExploit, Vendor Advisory, URL Repurposed
http://www.osvdb.org/19504Exploit
http://www.osvdb.org/19505Exploit
http://www.securityfocus.com/bid/14820Exploit

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-48227.5SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 allows remote attacker CVE-2005-482310.0Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrar CVE-2005-48247.5PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code v CVE-2005-48255.7Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of serv CVE-2005-48266.1Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote atta CVE-2005-48277.5Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outs CVE-2005-48286.4Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to CVE-2005-482910.0VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remo CVE-2005-48307.6CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response CVE-2005-48314.3viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which ca CVE-2005-48327.5SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with eleva CVE-2005-48334.3IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows re