SQL injection vulnerability in Shalwan MusicBox 2.3.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show parameter/top action is already covered by CVE-2006-1360.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
musicbox musicbox 2.3 |
||
musicbox musicbox 2.3.3 |
||
musicbox musicbox 2.3.4 |
||
musicbox musicbox 2.3_beta_2 |