PatchTheCVE1-2-3 music store vulnerabilities and fixes
Recent CVEs affecting 1-2-3 music store, with upgrade or downgrade steps. 2 tracked.
Also searched as: 1 2 3 music store, 1-2-3musicstore.
1-2-3 music store has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-07-03. Highest priority: CVE-2007-3520 (score 48/100).
- CVE-2007-3520 HIGH 7.5 MITIGATE SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbi
- CVE-2005-3855 HIGH 7.5 DOWNGRADE SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary S
FAQ
How do I fix 1-2-3 music store vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 1-2-3 music store being exploited right now?
None of the tracked 1-2-3 music store CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 1-2-3 music store CVE should I patch first?
CVE-2007-3520 currently ranks highest (48/100): SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbi.