CVEvulnerability
CVE-2006-2096
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-04-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message.
Affected configurations
• neocrome land down under (<= 802)
• neocrome land down under 601
• neocrome land down under 602
• neocrome land down under 700.01
• neocrome land down under 700.02
• neocrome land down under 700.03
• neocrome land down under 700.04
• neocrome land down under 700.05
• neocrome land down under 701
• neocrome land down under 800
• neocrome land down under 801
References
- http://securityreason.com/securityalert/814 securityreason.com
- http://www.securityfocus.com/archive/1/432235/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26143 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/814 securityreason.com
- http://www.securityfocus.com/archive/1/432235/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26143 exchange.xforce.ibmcloud.com