CVEvulnerability

CVE-2004-2038

4.3 MEDIUM Published 2004-05-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-05-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in (1) functions.php, (2) header.php or (3) auth.inc.php.

Affected configurations

• neocrome land down under (<= 700.03) • neocrome land down under 601 • neocrome land down under 602 • neocrome land down under 700.01 • neocrome land down under 700.02

References