CVE-2005-4821

2006-12-2911:00:00

mitre

www.cve.org

sql injection

land down under

remote attackers

arbitrary commands

auth.php

events.php

plug.php

AI Score

8.5

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2) the f parameter in events.php, or (3) the e parameter in plug.php.