Sql injection

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artistid parameter in an addalbum action...

CVE-2010-2721: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artistid parameter in an addalbum action...

CVE-2010-2722: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artistid parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the...