Joomla Component MP3 Allopass 1.0 Remote File Inclusion Vulnerability

No description provided by source. commp3allopass joomla component Remote File Include Vulnerability Component : commp3allopass Download file : http://www.joomlaratings.com Dicovered by : NoGe Contact : [email protected]...

Joomla Component MP3 Allopass 1.0 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Joomla Component MP3 Allopass 1.0 Remote File Inclusion Vulnerability ===================================================================== commp3allopass joomla compone...

Unfixed XSS vulnerability at mp3.seekasong.com

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting mp3.seekasong.com, which at the time of submission ranked 6223 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currentl...

Unfixed XSS vulnerability at www.mp3.com.au

Security researcher flux, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.mp3.com.au, which at the time of submission ranked 65712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is currently...

CVE-2007-4911

JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service daemon crash via a long .mp3 URI to TCP port 8000. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CVE-2007-4885

Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CVE-2007-4885

Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CVE-2007-4885

CVE-2007-4885 affects Avnex AV MP3 Player. A user-assisted remote attacker can cause an application crash (DoS) by supplying a malformed .au file that triggers a divide-by-zero error. Multiple connected sources (NVD, Red Hat, CVE listings) confirm the impact as a denial-of-service condition due t...

Netjuke 1.0-rc2 - sql injection & XSS

The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all the MP3, Ogg Vorbis and other format files that constitute your digital music collection. Supports images, language packs, multi-level security, random playlists, etc http://sourceforge.net/projects/netjuke...

netjuke-sqlxss.txt

The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all the MP3, Ogg Vorbis and other format files that constitute your digital music collection. Supports images, language packs, multi-level security, random playlists, etc http://sourceforge.net/projects/netjuke...

[SECURITY] Fedora 7 Update: id3lib-3.8.3-17.fc7

This package provides a software library for manipulating ID3v1 and ID3v2 tags. It provides a convenient interface for software developers to include standards-compliant ID3v1/2 tagging capabilities in their applications. Features include identification of valid tags, automatic size conversions,...

Code injection

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4402

Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

DEBIAN-CVE-2007-4396

Multiple CRLF injection vulnerabilities in 1 ixmmsa.pl 0.3, 2 l33tmusic.pl 2.00, 3 mpg123.pl 0.01, 4 ogg123.pl 0.01, 5 xmms.pl 2.0, 6 xmms2.pl 1.1.3, and 7 xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences...

Crlf injection

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4400

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4397

Multiple CRLF injection vulnerabilities in 1 xmms-thing 1.0, 2 XMMS Remote Control Script 1.07, 3 Disrok 1.0, 4 a2x 0.0.1, 5 Another xmms-info script 1.0, 6 XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF...