Land Down Under Multiple Remote SQL Injection Vulnerabilities

Bugtraq ID:	11569
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 01 2004 12:00AM
Updated:	Nov 01 2004 12:00AM
Credit:	The individual responsible for the discovery of this issue is currently unknown; Positive Technologies disclosed this issue.
Vulnerable:	Land Down Under Land Down Under 701 Land Down Under Land Down Under 700-05 Land Down Under Land Down Under 700-04 Land Down Under Land Down Under 700-03 Land Down Under Land Down Under 700-02 Land Down Under Land Down Under 700-01 Land Down Under Land Down Under 602 Land Down Under Land Down Under 601
Not Vulnerable:

Land Down Under Multiple Remote SQL Injection Vulnerabilities

Land Down Under is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied input prior to including it in SQL queries.

An attacker may leverage this issue to reveal or corrupt arbitrary database data. This may facilitate unauthorized access or denial of service.

Land Down Under Multiple Remote SQL Injection Vulnerabilities

No exploit is required to leverage this issue.

Land Down Under Multiple Remote SQL Injection Vulnerabilities

Solution:
The vendor has released a patch dealing with this issue.


Land Down Under Land Down Under 701

• Land Down Under LDU-patch701.rar
  http://www.neocrome.net/files/700/code/LDU-patch701.rar

Land Down Under Multiple Remote SQL Injection Vulnerabilities

References:

• Land Down Under Homepage (Land Down Under)
  
• Security patch for LDU v701 (Land Down Under)