singingstation.com XSS vulnerability

Open Bug Bounty ID: OBB-587008 Description| Value ---|--- Affected Website:| singingstation.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

absolutesounds.com XSS vulnerability

Open Bug Bounty ID: OBB-511958 Description| Value ---|--- Affected Website:| absolutesounds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

absolutesounds.com XSS vulnerability

Open Bug Bounty ID: OBB-457073 Description| Value ---|--- Affected Website:| absolutesounds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

free-loops.com XSS vulnerability

Vulnerable URL: http://free-loops.com/audio.php?term=1"...

earcms audio.php has an arbitrary file download vulnerability

Ear Music Ear Music is an interface using Discuz background style and UCHome user center style combined with the core by the high-speed template engine and caching mechanism and other frameworks coexist PHP open source music system. earcms audio.php arbitrary file download vulnerability. Allow...

PT-2015-6582

Name of the Vulnerable Software and Affected Versions SE HTML5 Album Audio Player plugin versions 1.1.0 and earlier Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the file parameter of the download audio.php file. This is a directory traversal...

Asterisk Recording Interface 0.7.15 Audio.PHP Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

CVE-2006-2021: Undefined Security Weakness

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure

Asterisk Recording Interface 0.7.15 - Audio.php Information Disclosure source: https://www.securityfocus.com/bid/17641/info Asterisk Recording Interface is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...