CVE-2010-2721

CVE-2010-2721 affects RightInPoint Lyrics Script 3.0. The vulnerability is a SQL injection in index.php via the artist_id parameter in an addalbum action, allowing remote attackers to execute arbitrary SQL commands. This is documented in multiple sources (e.g., NVD entry). The provided connected ...

CVE-2010-2722

CVE-2010-2722 describes an XSS vulnerability in RightInPoint Lyrics Script 3.0 (index.php) where the attacker can inject arbitrary script via the artist_id parameter, due to inadequate handling of data in a forced SQL error message. The affected component is the web interface’s index.php for Lyri...