CVE-2006-6577 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 63)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 1.03% — more likely to be exploited than 63% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-12-15 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| neocrome | land down under |
| neocrome | seditio |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | LDU 8.x - 'polls.php' SQL Injection | 2006-11-30 |
| exploit-db | LDU 8.x - avatarselect id SQL Injection | 2006-11-21 |
References
- http://securityreason.com/securityalert/2037
- http://www.securityfocus.com/archive/1/453134/100/200/threaded
- http://www.securityfocus.com/bid/21366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30616
- http://securityreason.com/securityalert/2037
- http://www.securityfocus.com/archive/1/453134/100/200/threaded
- http://www.securityfocus.com/bid/21366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30616
→ the Explorer · watch your stack · NVD