VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 4, 2006· Updated Jun 16, 2026

CVE-2006-6268

CVE-2006-6268

Description

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif" followed by a double-encoded NULL and ' (apostrophe) (%2500%2527).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Neocrome/Land Down Under2 versions
    cpe:2.3:a:neocrome:land_down_under:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:neocrome:land_down_under:*:*:*:*:*:*:*:*range: <=8.0
    • (no CPE)range: <= 8.x

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.