CVE-2026-105839

A flaw was found in libmikmod. An integer overflow in the Oktalyzer music module loader can result in a heap-based buffer overflow when parsing manipulated track counts. By tricking a user or application into processing a specially crafted audio file, an attacker could achieve arbitrary code...

FreePBX - Music Upload Filename RCE Detection

Detects FreePBX music module RCE by uploading a file named $id.wav via /admin/ajax.php?module=music&command=upload and matching uid= in the 500 response. !/usr/bin/env python3 -- coding: utf-8 -- """FreePBX music module filename command injection.""" import re from kittysploit import from...

EUVD-2007-5073

Malware in sbrugna...

EUVD-2007-5668

Malware in sbrugna...

EUVD-2007-5650

Malware in sbrugna...

FreePBX 13.0.x < 13.0.154 - Remote Command Execution

Vulnerable software : Freepbx Tested versions : 13.0.x $this-commandline = $commandline; $this-cwd = $cwd; Line 275 $commandline = $this-commandline; if '\' === DIRECTORYSEPARATOR && $this-enhanceWindowsCompatibility $commandline = 'cmd /V:ON /E:ON /C "'.$commandline.''; foreach...

CVE-2007-5696

PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module...

Remote file inclusion

PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module...

CVE-2007-5696

PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module...

CVE-2007-5696

CVE-2007-5696 describes a PHP remote file inclusion in includes.php of phpBasic that allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, potentially linked to the Music module. The CVSSv2 base score is 6.8 (NETWORK, MEDIUM, no authentication; partial impacts to ...

CVE-2007-5696: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module...

Sql injection

SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to the default URI...

CVE-2007-5678

SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to the default URI...

CVE-2007-5678

The CVE-2007-5678 entry describes an SQL injection in the Music module of phpBasic, exploitable via the id parameter in a view action. Affected component: phpBasic Music module; vulnerability arises from unsanitized input used in SQL queries, enabling remote attackers to alter or access data. Imp...

CVE-2007-5678

SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to the default URI...

[Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 &amp; Alucar

Software : phpBasic Music Module Homepage : http://phpbasic.com/ 1. SQL Injection by Xcross87 : Proof of concept : http://victim.com/phpbasic/?php=music&basic=view&id='SQL Injection Xploit admin user account :...

CVE-2007-5678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to the default URI...

[Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 &amp; Alucar

Software : phpBasic Music Module Homepage : http://phpbasic.com/ 1. SQL Injection by Xcross87 : Proof of concept : http://victim.com/phpbasic/?php=music&basic=view&id='SQL Injection Xploit admin user account :...

phpbasic-sqlrfi.txt

Software : phpBasic Music Module Homepage : http://phpbasic.com/ 1. SQL Injection by Xcross87 : Proof of concept : http://victim.com/phpbasic/?php=music&basic=view&id='SQL Injection Xploit admin user account :...

CVE-2007-5092

Summary: CVE-2007-5092 is a directory traversal vulnerability in the Dance Music module’s index.php for phpNuke, exploited when register_globals is enabled. The flaw allows remote attackers to include and execute arbitrary local files by injecting a .. path via an ACCEPT_FILE array parameter to m...