PT-2005-5444 · Sergids · Sergids Top Music

Published 2005-12-31 · Updated 2008-09-20 · CVE-2005-4781

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SergiDs Top Music module versions 3.0 PR3 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the idartist, idsong, and idalbum parameters to the "modules.php" endpoint.

Recommendations For SergiDs Top Music module versions 3.0 PR3 and earlier, consider restricting access to the vulnerable parameters idartist, idsong, and idalbum in the "modules.php" endpoint until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2005-4781

Affected Products

Sergids Top Music

References · 6

• 🔥 http://securityfocus.com/bid/15581 · Exploit
• 🔥 http://osvdb.org/21397 · Exploit
• 🔥 https://exploit-db.com/exploits/26607 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4781 · Security Note
• http://pridels0.blogspot.com/2005_11_27_pridels_archive.html · Note
• http://sergids.com/topmusic-changelog.html · Note