header-logo
Suggest Exploit
vendor:
Top Music Module
by:
Unknown
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Top Music Module
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: No
Related CWE:
CPE: a:phpnuke:top_music_module
Metasploit:
Other Scripts:
Platforms Tested:
Unknown

SQL Injection Vulnerabilities in Top Music Module for PHP-Nuke

The Top Music Module for PHP-Nuke is prone to SQL injection vulnerabilities. These vulnerabilities occur when user-supplied input is not properly sanitized before being used in SQL queries. An attacker can exploit these vulnerabilities by injecting malicious SQL code into the 'idartist' and 'idsong' parameters in the '/modules.php?name=topMusic' URL. Successful exploitation could lead to compromise of the application, disclosure or modification of data, or exploitation of vulnerabilities in the underlying database implementation.

Mitigation:

To mitigate these vulnerabilities, developers should ensure that user-supplied input is properly sanitized before being used in SQL queries. This can be achieved by using parameterized queries or prepared statements.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/15581/info

Top Music Module for PHP-Nuke is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

/modules.php?name=topMusic&op=artist&idartist=[SQL]

/modules.php?name=topMusic&op=song&idartist=1&idalbum=1&idsong=[SQL]

/modules.php?name=topMusic&op=song&idartist=1&idalbum=[SQL]

Navigation

Suggest Exploit

Services By CQR