Land Down Under Multiple Remote SQL Injection Vulnerabilities

Bugtraq ID:	14896
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 21 2005 12:00AM
Updated:	Sep 21 2005 12:00AM
Credit:	The individual responsible for the discovery of this issue is currently unknown.
Vulnerable:	Land Down Under Land Down Under 801
Not Vulnerable:

Land Down Under Multiple Remote SQL Injection Vulnerabilities

Land Down Under is affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied input prior to including it in SQL queries.

An attacker may leverage these issues to reveal or corrupt arbitrary database data. These may facilitate unauthorized access or denial of service.

Land Down Under Multiple Remote SQL Injection Vulnerabilities

No exploit is required to leverage this issue.

Land Down Under Multiple Remote SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Land Down Under Multiple Remote SQL Injection Vulnerabilities

References:

• Land Down Under Homepage (Land Down Under)