CVE-2007-1026

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.74%

Published

Feb 21, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBXLAtunes 0.1 - 'album' SQL Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information.

Weaknesses (CWE)

CWE-89

Affected Products (1)

scriptdungeon · xlatunesvulnerable

References (16)

http://osvdb.org/33743

http://www.securityfocus.com/archive/1/460592/100/0/threaded

http://www.securityfocus.com/archive/1/460621/100/0/threaded

http://www.securityfocus.com/archive/1/460739/100/0/threaded

http://www.securityfocus.com/bid/22602

http://www.vupen.com/english/advisories/2007/0644

https://exchange.xforce.ibmcloud.com/vulnerabilities/32556

https://www.exploit-db.com/exploits/3327