CVE-2018-6581: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

PT-2018-17645

Name of the Vulnerable Software and Affected Versions JMS Music version 1.1.1 Description The issue exists due to SQL Injection in the JMS Music component for Joomla, which can be exploited via a search using the keyword, artist, or username parameter. Recommendations For JMS Music version 1.1.1,...

Joomla! Component JMS Music 1.1.1 - SQL Injection

Joomla! Component JMS Music 1.1.1 - SQL Injection Exploit Title: Joomla! Component JMS Music 1.1.1 - SQL Injection Dork: N/A Date: 01.02.2018 Vendor Homepage: https://www.joommasters.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jms-music/...

skillboxes.com XSS vulnerability

Vulnerable URL: http://skillboxes.com/artist-profile.php?id=13'"59 Details: Description| Value ---|--- Patched:| Yes, at 08.10.2017 Latest check for patch:| 08.10.2017 23:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6416265 VIP website status:| No...

PT-2017-13589

Name of the Vulnerable Software and Affected Versions CyberLink LabelPrint version 2.5 Description The issue allows remote attackers to execute arbitrary code via specific parameters in an lpp project file, including the author and name parameters inside the INFORMATION tag, the artist parameter...

castlegalleryni.com XSS vulnerability

Vulnerable URL: http://www.castlegalleryni.com/paintingInfo.asp?paintingId=2906=Charles%20McAuley=1"...

mockingbird-gallery.com XSS vulnerability

Open Bug Bounty ID: OBB-255739 Description| Value ---|--- Affected Website:| mockingbird-gallery.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

midi-hits.com XSS vulnerability

Vulnerable URL: http://www.midi-hits.com/?SearchResults=artist...

Fab Tattoo Artist Secret Salon - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Fab Tattoo Artist Secret Salon published at the 'play' market has multiple vulnerabilities...

dacs.org.uk XSS vulnerability

Vulnerable URL: http://www.dacs.org.uk/for-art-market-professionals/artist-search?ARTISTFIRSTNAME=%22%3E%3Cimg+src%3dx+onerror%3dprompt%28%2fXSSPOSED%2f%29%3ELASTNAME=%22%3E%3Cimg+src%3dx+onerror%3dprompt%28%2fXSSPOSED%2f%29%3E=2013SIZE=10PAGE=1 Details: Description| Value ---|--- Patched:| No...

PT-2015-6407

Name of the Vulnerable Software and Affected Versions GigPress plugin versions prior to 2.3.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the show artist id or show venue id parameter in an add action in the gigpress.php page to wp-admin/admin.php...

Song Exporter v2.1.1 RS iOS - File Include Vulnerabilities

Document Title: =============== Song Exporter v2.1.1 RS iOS - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1172 Release Date: ============= 2013-12-18 Vulnerability Laboratory ID VL-ID: ====================================...

MusicBox 2.3.8 - Multiple Vulnerabilities

MusicBox 2.3.8 - Multiple Vulnerabilities Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008...

MusicBox 2.3.8 - Multiple Vulnerabilities

Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008 inurl:genrealbums.php?id= Vulnerability : SQL...

CVE-2011-5172: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, allows remote attackers to execute arbitrary code via a long string in the string element field in a frame xml file...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 file names to apps/userldap/settings.php; 2 url or 3 title parameter to apps/bookmarks/ajax/editBookmark.php; 4 tag or 5 page parameter to...

Nmap NSE net: daap-get-library

Retrieves a list of music from a DAAP server. The list includes artist names and album and song titles. Output will be capped to 100 items if not otherwise specified in the 'daapitemlimit' script argument. A 'daapitemlimit' below zero outputs the complete contents of the DAAP library. Based on...

Joomla! Component com_zoomportfolio - SQL Injection

Joomla! Component comzoomportfolio - SQL Injection --------------------------------------------------------------------------------- Joomla Component Zoom Portfolio id Remote Sql Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Grou...

Joomla! Component com_zoomportfolio - SQL Injection

--------------------------------------------------------------------------------- Joomla Component Zoom Portfolio id Remote Sql Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected]...

Joomla Component Music Manager LFI Vulnerability

Exploit for php platform in category web applications ================================================ Joomla Component Music Manager LFI Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...