header-logo
Suggest Exploit
vendor:
Land Down Under
by:
SecurityFocus
8.8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Land Down Under
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005

Multiple SQL Injection Vulnerabilities in Land Down Under

Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable application. Examples of vulnerable URLs include: http://www.example.com/ldu/forums.php?filter=forums%2Ephp%3Fc%3Dskin&x='; http://www.example.com/ldu/forums.php?m=topics&q=3&n='; http://www.example.com/ldu/forums.php?m='&q=3&n=last; http://www.example.com/ldu/forums.php?m=topics&s='

Mitigation:

Input validation should be used to ensure that user-supplied data is properly sanitized before being used in SQL queries.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/14618/info
   
Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation may allow the attacker to compromise the application, retrieve sensitive information, modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/ldu/forums.php?filter=forums%2Ephp%3Fc%3Dskin&x='
http://www.example.com/ldu/forums.php?m=topics&q=3&n=' 
http://www.example.com/ldu/forums.php?m='&q=3&n=last 
http://www.example.com/ldu/forums.php?m=topics&s='

Navigation

Suggest Exploit

Services By CQR