59 matches found
Music Store <= 1.0.14 - Referer Header Open Redirect
The Music Store – WordPress eCommerce WordPress plugin was affected by a Referer Header Open Redirect security vulnerability. GET /wp-content/plugins/music-store/ms-core/ms-submit.php HTTP/1.1 Host: localhost Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language:...
WordPress Music Store Plugin <= 1.0.14 - Open Redirection
This plugin is prone to an open redirection vulnerability, because of adding HTTP referer to ms-core/ms-submit.php. Solution Update the plugin...
Vimeo: Ability to Download Music Tracks Without Paying (Missing permission check on`/musicstore/download`)
Hello, I'm not sure how serious this is to be honest. If you're downloading tracks without paying, then I'm sure you could find a copy somewhere on the internet anyway. But I guess it's still an issue. When browsing the Music Store https://vimeo.com/musicstore, some tracks are free. To download...
Easybe Music Store SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...
Easybe Music Store SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================== Easybe Music Store SQL Injection Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...
jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit
No description provided by source. HTML !-- jetAudio 7.x ActiveX DownloadFromMusicStore 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- object id="obj"...
Easybe 1-2-3 Music Store Process.PHP SQL注入漏洞
Easybe 1-2-3 Music Store是一款基于PHP的WEB应用程序。 Easybe 1-2-3 Music Store不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Process.php'脚本对用户提交的'CategoryID'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 Easybe 1-2-3 Music Store 1.0 目前没有解决方案提供： http://easybe.com/...
Sql injection
SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...
CVE-2007-3520
SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...
CVE-2007-3520
CVE-2007-3520 describes a SQL injection in the Easybe 1-2-3 Music Store, via the parameter CategoryID in process.php, allowing remote attackers to execute arbitrary SQL commands. The root cause is unsafely handling the CategoryID input, enabling injected SQL through the web interface. Documented ...
CVE-2007-3520
SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...
Easybe 1-2-3 Music Store (process.php) Remote SQL Injection Vuln
Exploit for unknown platform in category web applications ================================================================ Easybe 1-2-3 Music Store process.php Remote SQL Injection Vuln ================================================================...
Easybe 1-2-3 Music Store - process.php SQL Injection
Easybe 1-2-3 Music Store - process.php SQL Injection --==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==...
Easybe 1-2-3 Music Store (process.php) Remote SQL Injection Vuln
No description provided by source. --==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...
easybe-sql.txt
--==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
CVE-2005-3855
SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter...
CVE-2005-3855
Affected product/component : 1-2-3 music store, process.php .Vulnerability : SQL injection via the AlbumID parameter, allowing remote attackers to execute arbitrary SQL commands.Root cause (as described) : unsafely constructed SQL in the application logic.Impact (per sources) : remote command exe...
1-2-3 music store "AlbumID" Sql injection.
1-2-3 music store "AlbumID" Sql injection. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/1-2-3-music-store-albumid-sql.html Vendor:http://easybe.com/ affected version: 1.0 and prior Product Description: Description: 1-2-3 Music Store - the music...
1-2-3 Music Store 1.0 - Process.php SQL Injection
1-2-3 Music Store 1.0 - Process.php SQL Injection source: https://www.securityfocus.com/bid/15544/info 1-2-3 Music Store is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...