high7.5
CVE-2006-1807
Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start pa…
Impact
Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start parameter in a search action or (2) type parameter in a top action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Musicbox | Musicbox | through 2.3.3 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2006/04/musicbox-vuln.html
- http://secunia.com/advisories/19672
- http://www.securityfocus.com/archive/1/441000/100/0/threaded
- http://www.securityfocus.com/bid/17545
- http://www.vupen.com/english/advisories/2006/1373
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27926
- http://pridels0.blogspot.com/2006/04/musicbox-vuln.html
- http://secunia.com/advisories/19672
- http://www.securityfocus.com/archive/1/441000/100/0/threaded
- http://www.securityfocus.com/bid/17545
- http://www.vupen.com/english/advisories/2006/1373
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27926