This is an old music source ported from Dnp Network, spreads around in the Vnese online community for about 3-4years ago. It's not outdated but it has some bugs, vulnerable bugs I'd say. Such as those id variables in music.php or musicajax.php are not filtered against special chars (double quote for instance). This possibly leads to a SQL Injection attack, then database exploit,and finally local attack.
And First poster is not the author of this code, more likely to promote his own forum..
|