WordPress Music Store Plugin <= 1.1.13 is vulnerable to SQL Injection

Software Music Store Type Plugin Vulnerable versions = 1.1.13 Fixed in 1.1.14 OWASP Top 10 A3: Injection Classification SQL Injection CVE N/A Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 3ee22c619ee0 Credits Noriko Totsuka JPCERT/CC Required privilege Unauthenticated...

WordPress plugin Music Store security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Malicious code in music-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec918691a90b4768ce57e736387051876ec127e2bb359539ef14c18fe673d668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4738 Malicious code in music-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec918691a90b4768ce57e736387051876ec127e2bb359539ef14c18fe673d668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

musicstore.de Cross Site Scripting vulnerability OBB-2293283

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress music-store plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. music-store is an online music store plugin used in it. A cross-site scripting vulnerability exists in WordPress music-store plugin...

CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports fromyear parameter...

CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports fromyear parameter...

Design/Logic Flaw

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports fromyear parameter...

CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports fromyear parameter...

CVE-2016-10992

The issue tracked as CVE-2016-10992 affects the WordPress Music Store plugin prior to version 1.0.43. The vulnerability is an Cross-Site Scripting (XSS) flaw exposed through the admin page parameter wp-admin/admin.php?page=music-store-menu-reports_from_year, as documented across multiple sources ...

WordPress Music Store plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.Music Store is one of the plugins used to add a music store to WordPress. A cross-site scripting vulnerability exists in version 1.0.41 of the WordPress Music Store plugin. An attacker can...

Wordpress Music Store 插件 v1.0.14-ms-submit.php-URL重定向漏洞

No description provided by source...

WordPress Music Store Plugin <= 1.0.41 - Cross Site Scripting (XSS)

Because of cross site scripting vulnerability, the attacker can steal cookie-based authentication credentials and to launch other attacks. Solution Update the plugin...

WordPress Music Store 1.0.41 Cross Site Scripting

Product: Music Store Exploit Author: Sachin Wagh Version: 1.0.41 Home page Link: https://wordpress.org/plugins/music-store/ ============================================================================ Details : The Music Store plugin for WordPress is prone to a cross-site scripting vulnerability...

Music Store <= 1.0.41 - Cross-Site Scripting (XSS)

The Music Store – WordPress eCommerce WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Vimeo: Reflected XSS on vimeo.com/musicstore

Description The value of the parameter section is reflected in the Javascript function MusicStoreCommon.initialize without escaping, which allows to insert Javascript code. Proof of concept 1. Go to https://vimeo.com/musicstore?section=%27-alertdocument.domain-%27. 2. alertdocument.domain is...

WordPress Music Store plugin open to redirection vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Music Store is one of the plug-ins for an online store for selling audio files. An open redirection vulnerability exists in t...

WordPress Music Store 1.0.14 Open Redirect

Title: Open Redirect Vulnerability in Music Store Wordpress Plugin v1.0.14 Submitter: Nitin Venkatesh Product: Music Store Wordpress Plugin Product URL: https://wordpress.org/plugins/music-store/ Vulnerability Type: URL Redirection to Untrusted Site 'Open Redirect' CWE-601 Affected Versions:...

Music Store <= 1.0.14 - Referer Header Open Redirect

The Music Store – WordPress eCommerce WordPress plugin was affected by a Referer Header Open Redirect security vulnerability. PoC GET /wp-content/plugins/music-store/ms-core/ms-submit.php HTTP/1.1 Host: localhost Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Languag...