CVE-2005-2674

Published Aug 23, 2005 CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Description
Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 10:45 PM
Reserved
Aug 23, 2005, 12:00 AM
Status
Modified
Published
Aug 23, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:15 PM