Published: 22/03/2006 Updated: 18/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote malicious users to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
musicbox musicbox 2.3_beta_2

source: wwwsecurityfocuscom/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successful exploitation of these vulnerabilities could al ...

source: wwwsecurityfocuscom/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successful exploitation of these vulnerabilities could allo ...

NVD-CWE-Other http://www.securityfocus.com/bid/17149 http://www.osvdb.org/23967 http://www.osvdb.org/23968 https://exchange.xforce.ibmcloud.com/vulnerabilities/27925 https://exchange.xforce.ibmcloud.com/vulnerabilities/25525 http://www.securityfocus.com/archive/1/441000/100/0/threaded http://www.securityfocus.com/archive/1/428972/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27447/

CVE-2006-1349

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect