Unrated severityNVD Advisory· Published Aug 23, 2005· Updated Apr 16, 2026
CVE-2005-2674
CVE-2005-2674
Description
Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected.
Affected products
1- cpe:2.3:a:neocrome:land_down_under:800:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- securitytracker.com/idnvdExploit
- www.securityfocus.com/bid/14619nvdExploit
- marc.infonvd
- www.neocrome.netnvd
News mentions
0No linked articles in our index yet.