https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:58:39 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2006-6268 <p>SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by &#34;default.gif&#34; followed by a double-encoded NULL and &#39; (apostrophe) (%2500%2527).</p> <p>SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by &#34;default.gif&#34; followed by a double-encoded NULL and &#39; (apostrophe) (%2500%2527).</p> https://vulnerability.circl.lu/vuln/fkie_cve-2006-6268 https://vulnerability.circl.lu/vuln/ghsa-v9rg-v3xf-623p <p>SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by &#34;default.gif&#34; followed by a double-encoded NULL and &#39; (apostrophe) (%2500%2527).</p> <p>SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by &#34;default.gif&#34; followed by a double-encoded NULL and &#39; (apostrophe) (%2500%2527).</p> https://vulnerability.circl.lu/vuln/ghsa-v9rg-v3xf-623p https://vulnerability.circl.lu/vuln/gsd-2006-6268 gsd-2006-6268 https://vulnerability.circl.lu/vuln/gsd-2006-6268