Product

rightinpoint lyrics engine vulnerabilities

2 published CVES affecting rightinpoint lyrics engine, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 1
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest rightinpoint lyrics engine CVEs

Newest publication first

CVE-2010-2722 Cross-site scripting (XSS) vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artist_id parameter, which is not properl...
Published 2010-07-13

MediumCVSS 4.3 EPSS 0.86%

Cross-site scripting (XSS) vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artist_id parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this informatio...
CVE-2010-2721 SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artist_id parameter in an addalbum action.
Published 2010-07-13

HighCVSS 7.5 EPSS 1.2% Public exploit

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artist_id parameter in an addalbum action.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.