3 matches found
CVE-2010-1499
SQL injection vulnerability in genreartists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in genreartists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-1499
The CVE-2010-1499 entry concerns MusicBox 3.3, where genre_artists.php is vulnerable to SQL injection via the id parameter. The underlying issue is improper input handling allowing remote command execution, with CVSS2 base score 7.5 (HIGH) and impacts on confidentiality, integrity, and availabili...