Lucene search
+L

2469 matches found

Exploit DB
Exploit DB
added 2007/11/23 12:00 a.m.44 views

Mp3 ToolBox 1.0 Beta 5 - 'skin_file' Remote File Inclusion

+By CrackersChild+ Script.......: Mp3 ToolBox 1.0 beta 5 Download.....: http://www.radiotoolbox.com/downloads/mp3toolbox/mp3toolboxbeta-5.zip Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File İnclude Vulnerability Dork.........:...

6.8CVSS5.8AI score0.02073EPSS
SaveExploits1
securityvulns
securityvulns
added 2007/11/02 12:00 a.m.53 views

Real Player multiple buffer overflows

ActiveX vulnerability is used in-the-wild for silent trojan code installation via Internet Explorer. In addition, there is a buffer overflow on .mov files parsing and .mp3 ID3 tags...

9.3CVSS5.1AI score0.08396EPSS
SaveExploits0References6Affected Software2
NVD
NVD
added 2007/10/31 5:46 p.m.25 views

CVE-2007-5080

Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow...

9.3CVSS8AI score0.07729EPSS
SaveExploits0References9
Prion
Prion
added 2007/10/31 5:46 p.m.35 views

Integer overflow

Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow...

9.3CVSS8.4AI score0.07729EPSS
SaveExploits0References9Affected Software2
Cvelist
Cvelist
added 2007/10/31 5:00 p.m.40 views

CVE-2007-5080

Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow...

7.9AI score0.07729EPSS
SaveExploits0References9
CVE
CVE
added 2007/10/31 5:00 p.m.78 views

CVE-2007-5080

CVE-2007-5080 : Multiple RealNetworks RealPlayer family components (RealPlayer 10/10.5, RealOne Player 1, RealPlayer Enterprise) on Windows are affected by a heap-based buffer overflow triggered while processing Lyrics3 2.00 tags in MP3 files. The vulnerability would allow a remote attacker to ex...

9.3CVSS7.9AI score0.07729EPSS
SaveExploits0References9Affected Software3
securityvulns
securityvulns
added 2007/10/31 12:00 a.m.40 views

Heap overflow in RealPlayer ID3 tag parser

======= Summary ======= Name: Heap overflow in RealPlayer ID3 tag parsing code Release Date: 29 October 2007 Reference: NGS00432 Discover: John Heasman [email protected] Vendor: RealNetworks Systems Affected: Several builds of RealPlayer 10.5, All builds of RealPlayer 10. For additional affect...

7.6AI score
SaveExploits0
Prion
Prion
added 2007/10/12 6:17 p.m.28 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass commp3allopass 1.0 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter to 1 allopass.php and 2 allopass-error.php...

6.8CVSS7.9AI score0.37531EPSS
SaveExploits3References5Affected Software1
Cvelist
Cvelist
added 2007/10/12 6:00 p.m.33 views

CVE-2007-5412

Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass commp3allopass 1.0 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter to 1 allopass.php and 2 allopass-error.php...

7.7AI score0.37531EPSS
SaveExploits3References5
CVE
CVE
added 2007/10/12 6:00 p.m.164 views

CVE-2007-5412

Concrete details found: CVE-2007-5412 affects Joomla! with the com_mp3_allopass 1.0 component. Vulnerable vector is a remote PHP file inclusion via the mosConfig_live_site parameter in (1) allopass.php and (2) allopass-error.php, enabling arbitrary code execution. References indicate public explo...

6.8CVSS7.7AI score0.37531EPSS
SaveExploits3References5Affected Software1
seebug.org
seebug.org
added 2007/10/11 12:00 a.m.148 views

Joomla Component MP3 Allopass 1.0 Remote File Inclusion Vulnerability

No description provided by source. commp3allopass joomla component Remote File Include Vulnerability Component : commp3allopass Download file : http://www.joomlaratings.com Dicovered by : NoGe Contact : [email protected]...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/10/10 12:00 a.m.77 views

Joomla Component MP3 Allopass 1.0 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Joomla Component MP3 Allopass 1.0 Remote File Inclusion Vulnerability ===================================================================== commp3allopass joomla compone...

7.1AI score
SaveExploits0
xssed
xssed
added 2007/09/29 12:00 a.m.28 views

Unfixed XSS vulnerability at mp3.seekasong.com

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting mp3.seekasong.com, which at the time of submission ranked 6223 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currentl...

6.6AI score
SaveExploits0References1
xssed
xssed
added 2007/09/22 12:00 a.m.10 views

Unfixed XSS vulnerability at www.mp3.com.au

Security researcher flux, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.mp3.com.au, which at the time of submission ranked 65712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is currently...

6.6AI score
SaveExploits0References1
NVD
NVD
added 2007/09/17 5:17 p.m.17 views

CVE-2007-4911

JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service daemon crash via a long .mp3 URI to TCP port 8000. NOTE: some of these details are obtained from third party information...

5CVSS6.6AI score0.03309EPSS
SaveExploits2References6
Prion
Prion
added 2007/09/14 12:17 a.m.22 views

Design/Logic Flaw

Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

4.3CVSS7.1AI score0.00983EPSS
SaveExploits0References1
NVD
NVD
added 2007/09/14 12:17 a.m.25 views

CVE-2007-4885

Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

4.3CVSS6.6AI score0.00983EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2007/09/14 12:00 a.m.33 views

CVE-2007-4885

Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

6.6AI score0.00983EPSS
SaveExploits0References1
CVE
CVE
added 2007/09/14 12:00 a.m.56 views

CVE-2007-4885

CVE-2007-4885 affects Avnex AV MP3 Player. A user-assisted remote attacker can cause an application crash (DoS) by supplying a malformed .au file that triggers a divide-by-zero error. Multiple connected sources (NVD, Red Hat, CVE listings) confirm the impact as a denial-of-service condition due t...

4.3CVSS6.6AI score0.00983EPSS
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2007/09/11 12:00 a.m.180 views

Netjuke 1.0-rc2 - sql injection & XSS

The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all the MP3, Ogg Vorbis and other format files that constitute your digital music collection. Supports images, language packs, multi-level security, random playlists, etc http://sourceforge.net/projects/netjuke...

0.7AI score
SaveExploits0
Rows per page
Query Builder