Vulnerabilities

TI-2005-03628 CVE-2005-3834 · GHSA-rpfh-hvgr-7r92

Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows…

LOW 24

Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01736 Published 2005-11-26 No fix listed

TI-2005-03627 CVE-2005-3833 · GHSA-gm55-q6p8-q8ff

SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote…

LOW 35

SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01162 Published 2005-11-26 No fix listed

TI-2004-02220 CVE-2004-2349 · GHSA-3h55-vffm-c96r

Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL queries.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-08-16 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows…

SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote…

Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers…