Exploitation Summary
EIP tracks 5 public exploits for CVE-2005-2675. PoCs published by matrix_killer, bl2k.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in 'Land Down Under' software, with example URLs demonstrating unsanitized input in the 'c' parameter. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
Description
Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via the (1) s or (2) m parameter to forums.php, (3) o, (4) w, (5) s, or (6) p parameter to list.php, (7) m parameter to journal.php, (8) x or (9) n parameter to forums.php, or (10) w parameter to links.php. NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected.
Exploits (5)
The provided text describes SQL injection vulnerabilities in 'Land Down Under' software, with example URLs demonstrating unsanitized input in the 'c' parameter. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
The provided text describes SQL injection vulnerabilities in 'Land Down Under' software, with example URLs demonstrating unsanitized input in query parameters. No actual exploit code is present, only advisory details.
The provided text describes a SQL injection vulnerability in 'Land Down Under' software, where unsanitized input in the 'w' parameter of 'links.php' can be exploited. The example URL demonstrates a basic SQLi payload but lacks executable code.
The provided text describes SQL injection vulnerabilities in 'Land Down Under' software, detailing vulnerable parameters in journal.php. It includes example URLs demonstrating the injection points but lacks executable exploit code.
The provided code is a writeup describing SQL injection vulnerabilities in 'Land Down Under' software. It includes example URLs demonstrating unsanitized input in SQL queries but lacks executable exploit code.