Login Request a demo
MU
Product
Musicbox
by Musicbox · last CVE May 9, 2008
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Musicbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-2125
–
1%
May 9
SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary SQL commands via the artistId parameter
Affected: 2.3.6; 2.3.7
CVE-2006-3882
–
1%
Jul 27
Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function
Affected: 2.3.4
CVE-2006-3881
–
1%
Jul 27
Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for…
Affected: 2.3.4
CVE-2006-3886
–
1%
Jul 27
SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a…
Affected: 2.3; 2.3.3; 2.3.4; 2.3_beta_2
CVE-2006-1807
–
1%
Apr 18
Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start parameter in a search…
Affected: through 2.3.3
CVE-2006-1806
–
1%
Apr 18
Cross-site scripting (XSS) vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a…
Affected: through 2.3.3
CVE-2006-1360
–
1%
Mar 23
Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a)…
Affected: 2.3_beta_2
CVE-2006-1349
–
2%
Mar 22
Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show…
Affected: 2.3_beta_2
CVE-2005-4500
–
1%
Dec 22
SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type parameter
Affected: 2.3
Showing 9