88 matches found
CVE-2010-2721
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artistid parameter in an addalbum action...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artistid parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the...
CVE-2010-2721
CVE-2010-2721 affects RightInPoint Lyrics Script 3.0. The vulnerability is a SQL injection in index.php via the artist_id parameter in an addalbum action, allowing remote attackers to execute arbitrary SQL commands. This is documented in multiple sources (e.g., NVD entry). The provided connected ...
CVE-2010-2722
CVE-2010-2722 describes an XSS vulnerability in RightInPoint Lyrics Script 3.0 (index.php) where the attacker can inject arbitrary script via the artist_id parameter, due to inadequate handling of data in a forced SQL error message. The affected component is the web interface’s index.php for Lyri...
CVE-2010-2721
SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artistid parameter in an addalbum action...
Lyrics V3 Engine SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99 Author : Sid3^effects aKa HaRi special...
Lyrics V3 engine SQL injection Vulnerabilty
Exploit for php platform in category web applications =========================================== Lyrics V3 engine SQL injection Vulnerabilty =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...
Lyrics Script Cross Site Scripting / SQL Injection
Exploit Title: Lyrics Script SQL Injection and Cross-Site Scripting Vulnerabilities Date: 14.06.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...
Lyrics Script - SQL Injection Cross-Site Scripting
Lyrics Script - SQL Injection Cross-Site Scripting :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Lyrics Script SQL Injection and Cross-Site Scripting Vulnerabilities Author = Valentin Hoebel Contact =...
Lyrics Script SQL Injection and XSS Vulnerabilities
Exploit for php platform in category web applications =================================================== Lyrics Script SQL Injection and XSS Vulnerabilities =================================================== :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: Gener...
Lyrics Script - SQL Injection / Cross-Site Scripting
:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Lyrics Script SQL Injection and Cross-Site Scripting Vulnerabilities Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...
Java Zero-Day Attacks In The Wild
Just days after Google researcher Tavis Ormandy released details on a dangerous new Java vulnerability, malicious hackers have pounced and are exploiting the flaw in the wild to launch drive-by download attacks. Virus hunters have spotted the attacks on a popular song lyrics Web site. Any visitor...
CVE-2008-4906
SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-4906
SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-4906
CVE-2008-4906 describes an SQL injection in the Lyrics (lyrics_menu) plugin for e107, version 0.42, where the l_id parameter enables remote attackers to execute arbitrary SQL commands. This is a high-severity issue (CVSS v2 base score 7.5). The provided documents confirm the vulnerable component ...
CVE-2008-4672
Cross-site scripting XSS vulnerability in searchresults.php in buymyscripts Lyrics Script allows remote attackers to inject arbitrary web script or HTML via the k parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4672
CVE-2008-4672 is a cross-site scripting (XSS) flaw in the buymyscripts Lyrics Script, specifically in search_results.php where an attacker can inject arbitrary script/HTML via the k parameter. The connected documents confirm the vulnerable component and parameter, but do not provide concrete deta...
CVE-2008-4672
Cross-site scripting XSS vulnerability in searchresults.php in buymyscripts Lyrics Script allows remote attackers to inject arbitrary web script or HTML via the k parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Lyrics Script - 'search_results.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31437/info Lyrics Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Lyrics Script - search_results.php Cross-Site Scripting
Lyrics Script - searchresults.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31437/info Lyrics Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...