CVE-2024-13327: Improper Neutralization of Input During Web Page Generation

The Musicbox WordPress plugin through 2.0.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-2113

Name of the Vulnerable Software and Affected Versions Musicbox WordPress plugin versions 2.0.3 and earlier Description The issue arises from the Musicbox WordPress plugin not sanitizing and escaping a parameter before outputting it back in the page. This leads to a Reflected Cross-Site Scripting...

musicbox-online.com Cross Site Scripting vulnerability OBB-3281276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MusicBox 2.3.4 Page Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

MusicBox 2.3 index.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly saniti...

Musicbox <= 3.7 - Multiple Vulnerabilites

No description provided by source. ============================================================ MusicBox = v3.7 Multiple Vulnerabilities ============================================================ Author : R@1D3N amin emami Software Link : www.musicboxv2.com Price : $275 Version : v3.7 and...

MusicBox 2.3 index.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly saniti...

MusicBox 2.3 Type Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...

Musicbox 3.3 - Upload Shell Vulnerability

No description provided by source...

Musicbox <= 2.3.7 (artistId) Remote SQL Injection Vulnerability

No description provided by source. Rem0te SQL Injection Vulnerability Musicbox viewalbums.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Musicbox version : Version 2.3.6 / 2.3.7 Scrip...

MusicBox 3.3 - SQL Injection Exploit

No description provided by source...

Musicbox 2.3.8 - Multiple Vulnerabilities

No description provided by source...

musicbox SQL Injection

No description provided by source. Exploit Title: musicbox sql injection Date: 1/6/2010 Author: titanichacker Software Link: http://www.musicboxv2.com Version: all versions Tested with: http://server/index.php?action=genre&id=2' http://server/index.php?term=achkl&in=album&action=search&start=0'...

MusicBox 2.3 cart.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly saniti...

Musicbox 2.3.8 - Multiple Vulnerabilities

Musicbox version 2.3.8 suffers from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 -...

MusicBox 2.3.8 - Multiple Vulnerabilities

MusicBox 2.3.8 - Multiple Vulnerabilities Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008...

MusicBox 2.3.8 - Multiple Vulnerabilities

Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008 inurl:genrealbums.php?id= Vulnerability : SQL...

UChome 2.0 MusicBox 插件 SQL注入漏洞

UChome是国内一款流行的内容管理系统软件，其v2.0版本MusicBox插件中存在SQL注入漏洞，攻击者可以利用该漏洞，执行恶意SQL语句。 UChome 2.0...

UCenter Home 2.0某插件鸡肋注入漏洞（不知道是不是0day)

简要描述： 某个插件的问题，不知道是不是0day 详细说明： 影响版本:UCenter Home 2.0 关键词：inurl:musicbox.php?do= inurl:do=musicbox Powered by UCenter Home 2.0 inurl:space.php?do=musicbox 发生问题的插件是musicbox，通过上面的关键字进行检索后会找到一些启用了这个插件的站点，在网址后加“'”会报错，放入SQLmap中跑了下，几乎都存在注入。 漏洞证明：...

Musicbox SQL Injection and Cross Site Scripting Vulnerabilities

Musicbox is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...