CVE-2006-3886

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show...

CVE-2006-3881

Cross-site scripting XSS vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parameters in a top action, are already...

CVE-2006-3881

The CVE-2006-3881 entry describes a Cross-site Scripting (XSS) vulnerability in MusicBox 2.3.4 and earlier, exploitable via the id parameter in the top-level URI request. The note states that the id parameter in index.php and the type/show parameters in a top action are already covered by CVE-200...

CVE-2006-3882: Undefined Security Weakness

Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

CVE-2006-3886: Undefined Security Weakness

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show...

CVE-2006-3881: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parameters in a top action, are already...

musicBox234.txt

MusicBox 2.3.4 http://www.musicboxv2.com ------------ PHPinfo page ------------ /phpinfo.php -------------------------- Cross Site Scripting XSS -------------------------- http://www.target.xx/?id=alert/EllipsisSecurityTest/&page=0...

MusicBox <= 2.3.4 XSS SQL injection Vulnerability

MusicBox 2.3.4 http://www.musicboxv2.com ------------ PHPinfo page ------------ /phpinfo.php -------------------------- Cross Site Scripting XSS -------------------------- http://www.target.xx/?id=scriptalert/EllipsisSecurityTest//script&page=0...

MusicBox 2.3.4 - page SQL Injection

MusicBox 2.3.4 - page SQL Injection source: https://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

MusicBox 2.3.4 - 'page' SQL Injection

source: https://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the application, access or modify data, or...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action...

CVE-2006-1807

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

CVE-2006-1806

Cross-site scripting XSS vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

CVE-2006-1807

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

CVE-2006-1807

CVE-2006-1807 affects MusicBox (older releases) where the PHP file index.php is vulnerable to SQL injection. The vulnerability allows remote attackers to inject arbitrary SQL via the (1) start parameter in a search action or (2) type parameter in a top action, in MusicBox 2.3.3 and earlier. Conne...

CVE-2006-1806

CVE-2006-1806 describes a cross-site scripting (XSS) vulnerability in Musicbox 2.3.3 and earlier. The issue is triggered via the term parameter in a search action within index.php, allowing remote attackers to inject arbitrary web script or HTML. The NVD entry for this CVE confirms the vulnerable...

CVE-2006-1806

Cross-site scripting XSS vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action...

CVE-2006-1806: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action...

CVE-2006-1807: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...