Vulnerabilities > Neocrome > Medium

DATE CVE VULNERABILITY TITLE RISK
2005-09-02 CVE-2005-2780 HTML Injection vulnerability in Neocrome Land Down Under 800
Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to inject arbitrary web script or HTML via a signature.
network
neocrome
4.3
2004-05-29 CVE-2004-2038 HTML Injection vulnerability in Land Down Under BBCode
Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in (1) functions.php, (2) header.php or (3) auth.inc.php.
network
neocrome
4.3