Vulnerability in Neocrome Land Down Under

CVE-2006-2096

plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) year parameter, which reveals the path in an error message.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Neocrome Land_down_under — versions 601, 602, 700.01
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)