musicbox musicbox vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covere...

Musicbox Musicbox 2.3 Musicbox Musicbox 2.3.4 Musicbox Musicbox 2.3 Beta 2 Musicbox Musicbox 2.3.3

1 EDB exploit

SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote malicious users to execute arbitrary SQL commands via the artistId parameter.

Musicbox Musicbox 2.3.6 Musicbox Musicbox 2.3.7

2 EDB exploits

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) start parameter in a search action or (2) type parameter in a top action.

Musicbox Musicbox

Cross-site scripting (XSS) vulnerability in index.php in Musicbox 2.3.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the term parameter in a search action.

Musicbox Musicbox

Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. NOTE: the id parameter in index.php, and the type and show parame...

Musicbox Musicbox 2.3.4

SQL injection vulnerability in MusicBox 2.3 allows remote malicious users to execute arbitrary SQL commands via the (1) show and (2) type parameter. NOTE: the provenance of this information is unknown, although it was later rediscovered.

Musicbox Musicbox 2.3

2 EDB exploits

Shalwan MusicBox 2.3.4 and previous versions allows remote malicious users to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

Musicbox Musicbox 2.3.4

Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote malicious users to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php.

Musicbox Musicbox 2.3 Beta 2

2 EDB exploits

Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote malicious users to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) message1 or (5) message parameter to (b) cart.php.

Musicbox Musicbox 2.3 Beta 2

SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Musicboxv2 Musicbox 3.3

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook