CVE-2005-2884: Neocrome Land Down Under

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event.

Affected products

• Neocrome Land Down Under: version 601 only; version 602 only; version 700.01 only; version 700.02 only; version 700.03 only; version 700.04 only; …

Published 2005-09-14. Last modified 2026-06-16.