Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the confKey parameter. An attacker can execute arbitrary scripts in the context of the victim's browser session by injecting a malicious payload into this parameter. Note: This is only exploitable if the...

XLAtunes 0.1 (album) Remote SQL Injection Vulnerability

Critical Status:High Found By: 0x90 Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends confkey-Password confvalue-Username Table:config http://host.com/path/?mode=view&album=-120UNION20SELECT20confkey20FROM20config/...

XLAtunes 0.1 - 'album' SQL Injection

Critical Status:High Found By:Bl0od3r Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends fuckz:Donh4cky0u for steeling hacks of others,for his 100% noobility,for his noobass.DON your an idiot.fucka. - confkey-Password confvalue-Username Table:config...