Vulnerabilities

TI-2009-02061 CVE-2009-2154 · GHSA-pgwg-3c86-gffj

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when…

LOW 32

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00867 Published 2009-06-22 No fix listed CWE-89

TI-2009-02060 CVE-2009-2153 · GHSA-x7f5-cr2c-qwr8

Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01255 Published 2009-06-22 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when…

Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0…