CVE-2006-3886

CVE-2006-3886 describes an SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action for requests to the top-level URI. The note indicates other actions (start/search and sho...

musicBox234.txt

MusicBox 2.3.4 http://www.musicboxv2.com ------------ PHPinfo page ------------ /phpinfo.php -------------------------- Cross Site Scripting XSS -------------------------- http://www.target.xx/?id=alert/EllipsisSecurityTest/&page=0...

MusicBox <= 2.3.4 XSS SQL injection Vulnerability

MusicBox 2.3.4 http://www.musicboxv2.com ------------ PHPinfo page ------------ /phpinfo.php -------------------------- Cross Site Scripting XSS -------------------------- http://www.target.xx/?id=scriptalert/EllipsisSecurityTest//script&page=0...

MusicBox 2.3.4 - page SQL Injection

MusicBox 2.3.4 - page SQL Injection source: https://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

MusicBox 2.3.4 - 'page' SQL Injection

source: https://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the application, access or modify data, or...

CVE-2006-1806

Cross-site scripting XSS vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

CVE-2006-1807

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

CVE-2006-1806

CVE-2006-1806 describes a cross-site scripting (XSS) vulnerability in Musicbox 2.3.3 and earlier. The issue is triggered via the term parameter in a search action within index.php, allowing remote attackers to inject arbitrary web script or HTML. The NVD entry for this CVE confirms the vulnerable...

CVE-2006-1807

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

CVE-2006-1806

Cross-site scripting XSS vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action...

CVE-2006-1807

CVE-2006-1807 affects MusicBox (older releases) where the PHP file index.php is vulnerable to SQL injection. The vulnerability allows remote attackers to inject arbitrary SQL via the (1) start parameter in a search action or (2) type parameter in a top action, in MusicBox 2.3.3 and earlier. Conne...

Musicbox vuln.

Musicbox vuln. Vuln. discovered by : r0t Date: 16 april 2006 vendorlink:http://www.musicboxv2.com/ affected versions:2.3.3 and previous orginal advisory:http://pridels.blogspot.com/2006/04/musicbox-vuln.html Vuln. Description: 1. Input passed to the "term" parameter when performing a search isn't...

CVE-2006-1360

Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 type, or 3 show parameter to a index.php; or the 4 message1 or 5 message parameter to b cart.php...

CVE-2006-1360

Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 type, or 3 show parameter to a index.php; or the 4 message1 or 5 message parameter to b cart.php...

CVE-2006-1360

CVE-2006-1360 describes multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2. Attack via parameters (id, type, show to index.php; message1 or message to cart.php) can allow remote attackers to execute arbitrary SQL commands. The description specifies the vulnerable inputs but does not pr...

CVE-2006-1349

Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...

CVE-2006-1349

CVE-2006-1349 describes multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2. An affected component is the Musicbox web interface (index.php and cart.php) where user-supplied input in parameters (1) id, (2) type, (3) show, and (4) message1 can be injected as script/HTML. The...