Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected.

The remote version of Land Down Under is prone to several SQL injection and cross-site scripting attacks due to its failure to sanitize user-supplied input to several parameters used by the 'auth.php', 'events.php', 'index.php', 'list.php', and 'plug.php' scripts.  A malicious user can exploit exploit these flaws to manipulate SQL queries, steal authentication cookies, and the like.

The remote host is running Land Down Under, a web-based content management system.  This version of LDU is vulnerable to a script injection flaw within the 'events.php' script.  An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious URI.  Successful exploitation would lead to script code being executed within the user's browser.  In addition, the product is vulnerable to multiple SQL injection flaws.  An attacker exploiting these flaws would be able to execute code within the context of the database.

The remote version of Land Down Under is prone to various SQL injection and cross-site scripting attacks provided PHP's 'magic_quotes' setting is disabled due to its failure to sanitize the request URI before using it in 'system/functions.php' in the function 'ldu_log()'.  A malicious user may be able to exploit this issue to manipulate SQL queries, steal authentication cookies, and the like. 

In addition, it also fails to properly sanitize the user-supplied signature in forum posts.  A malicious user can exploit this vulnerability to steal authentication cookies and manipulate the HTML format in 'forums.php'.

ID	Name	Product	Family	Severity
19603	Land Down Under <= 801 Multiple Vulnerabilities	Nessus	CGI abuses	high
3209	Land Down Under < 802 events.php SQL Injection	Nessus Network Monitor	CGI	medium
19678	Land Down Under <= 800 Multiple Vulnerabilities	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2005-2674

medium

Tenable Plugins

high

medium

medium