Music Gallery Site v1.0 - SQL Injection on music_list.php

Exploit Title: Music Gallery Site v1.0 - SQL Injection on musiclist.php Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0938 mitre.org nvd.nist.org Author Name: Muhammad Navaid Zafar Ansari Vendor Homepage: https://www.sourcecodester.com Software Link:...

Music Gallery Site 1.0 SQL Injection Vulnerability

Music Gallery Site - SQL Injection on page musiclist.php and parameter cid is vulnerable, application url is ?page=musiclist&cid=?. Any remote attacker can access this page to exploit the vulnerbility. CVE Assigned: CVE-2023-0938 mitre.org nvd.nist.org Author Name: Muhammad Navaid Zafar Ansari...

Music Gallery Site 1.0 SQL Injection

Music Gallery Site - SQL Injection on page musiclist.php and parameter cid is vulnerable, application url is ?page=musiclist&cid=?. Any remote attacker can access this page to exploit the vulnerbility. Date: 21 February 2023 CVE Assigned: CVE-2023-0938 mitre.org nvd.nist.org Author Name: Muhammad...

CVE-2023-0938

creationtimestamp| type| source ---|---|--- 2023-02-21 12:16:42+00:00| seen| https://t.me/cibsecurity/58570 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51288...

CVE-2023-0938

CVE-2023-0938 affects SourceCodester Music Gallery Site 1.0, specifically the GET Request Handler’s music_list.php. The vulnerability arises from unsafely handling the URL parameter cid , allowing remote SQL injection. Public exploits exist (e.g., Exploit-DB), indicating practical exploitability....