Vulnerabilities

TI-2008-02044 CVE-2008-2125 · GHSA-59rf-wwpm-fjfj

SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote…

LOW 35

SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary SQL commands via the artistId parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00981 Published 2008-05-09 No fix listed CWE-89

TI-2006-03765 CVE-2006-3886 · GHSA-8766-gh77-5x27

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers…

LOW 35

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01135 Published 2006-07-27 No fix listed

TI-2006-03761 CVE-2006-3882 · GHSA-wjqw-5pxm-462r

Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration…

LOW 25

Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01184 Published 2006-07-27 No fix listed

TI-2006-03760 CVE-2006-3881 · GHSA-f59r-wvxp-8pqf

Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows…

LOW 22

Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01167 Published 2006-07-27 No fix listed

TI-2006-01753 CVE-2006-1807 · GHSA-v573-wpfr-qjmx

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow…

LOW 36

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start parameter in a search action or (2) type parameter in a top act…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01377 Published 2006-04-18 No fix listed

TI-2006-01752 CVE-2006-1806 · GHSA-fvcm-72v3-xfjc

Cross-site scripting (XSS) vulnerability in index.php in Musicbox 2.3.3 and earlier…

LOW 16

Cross-site scripting (XSS) vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01332 Published 2006-04-18 No fix listed

TI-2006-01314 CVE-2006-1360 · GHSA-4mf4-qh7q-fjff

Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to…

LOW 36

Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) message1 or (5) message…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0133 Published 2006-03-23 No fix listed CWE-89

TI-2006-01303 CVE-2006-1349 · GHSA-6872-ggpc-h4gq

Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.ph…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02028 Published 2006-03-22 No fix listed

TI-2005-04243 CVE-2005-4500 · GHSA-m929-2mf3-jfhp

SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary…

LOW 35

SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01262 Published 2005-12-22 No fix listed CWE-89

Vulnerabilities

Filters