Vulnerabilities > Plaino

DATE CVE VULNERABILITY TITLE RISK
2006-02-19 CVE-2006-0787 Unspecified vulnerability in Plaino Wimpy MP3
wimpy_trackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary strings into trackme.txt via the (1) trackFile, (2) trackArtist, and (3) trackTitle parameters, which can result in providing false information about songs, occupying excessive disk space with very long parameter values, and storing executable code that might be invoked through a different vulnerability.
network
high complexity
plaino
4.0