Vulnerabilities > CVE-2006-3886 - SQL Injection vulnerability in MusicBox Page Parameter

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
musicbox
exploit available
NVD
Published: 2006-07-27
Updated: 2018-10-17

Summary

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show parameter/top action is already covered by CVE-2006-1360.

Vulnerable Configurations

Part Description Count
Application
Musicbox
4

Exploit-Db

descriptionMusicBox 2.3.4 Page Parameter SQL Injection Vulnerability. CVE-2006-3886. Webapps exploit for php platform
idEDB-ID:28262
last seen2016-02-03
modified2006-07-24
published2006-07-24
reporterEllipSiS Security
sourcehttps://www.exploit-db.com/download/28262/
titleMusicBox 2.3.4 Page Parameter SQL Injection Vulnerability

References