jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit

No description provided by source. HTML !-- jetAudio 7.x ActiveX DownloadFromMusicStore 0day Remote Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on:.. - jetAudio 7.0.3 Basic - Microsoft Internet Explorer 6 Just for fun ; -- object id="obj"...

CVE-2007-4396

Multiple CRLF injection vulnerabilities in 1 ixmmsa.pl 0.3, 2 l33tmusic.pl 2.00, 3 mpg123.pl 0.01, 4 ogg123.pl 0.01, 5 xmms.pl 2.0, 6 xmms2.pl 1.1.3, and 7 xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences...

DEBIAN-CVE-2007-4400

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

Easybe 1-2-3 Music Store Process.PHP SQL注入漏洞

Easybe 1-2-3 Music Store是一款基于PHP的WEB应用程序。 Easybe 1-2-3 Music Store不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Process.php'脚本对用户提交的'CategoryID'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 Easybe 1-2-3 Music Store 1.0 目前没有解决方案提供： http://easybe.com/...

Buffer overflow

Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long filename when setting background music...

CVE-2007-3545

Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long filename when setting background music...

Sql injection

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

CVE-2007-3520

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

CVE-2007-3520

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

CVE-2007-3520

CVE-2007-3520 describes a SQL injection in the Easybe 1-2-3 Music Store, via the parameter CategoryID in process.php, allowing remote attackers to execute arbitrary SQL commands. The root cause is unsafely handling the CategoryID input, enabling injected SQL through the web interface. Documented ...

CVE-2007-3520: Undefined Security Weakness

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter...

Easybe 1-2-3 Music Store (process.php) Remote SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================ Easybe 1-2-3 Music Store process.php Remote SQL Injection Vuln ================================================================...

Easybe 1-2-3 Music Store - process.php SQL Injection

Easybe 1-2-3 Music Store - process.php SQL Injection --==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==...

easybe-sql.txt

--==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Easybe 1-2-3 Music Store (process.php) Remote SQL Injection Vuln

No description provided by source. --==+================================================================================+==-- --==+ Easybe 1-2-3 Music Store SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

CVE-2007-2916

Cross-site scripting XSS vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter...

CVE-2007-2916

Cross-site scripting XSS vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter...

CVE-2007-2916

GMTT Music Distro 1.2 contains a cross-site scripting (XSS) vulnerability in showown.php that can be triggered via the st parameter. The root cause is improper handling of user-supplied input in showown.php, allowing injected web script or HTML to be executed in the context of the victim’s browse...

CVE-2007-2916: Undefined Security Weakness

Cross-site scripting XSS vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter...

Media Technology Group CDPass ActiveX control stack buffer overflows

Overview The Media Technology Group CDPass ActiveX control contains several stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Media Technology Group CDPass is software that provides bonus content for music CDs...